f_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 617.253707] attempt to access beyond end of device [ 617.287055] loop0: rw=0, want=11377, limit=112 [ 617.316792] attempt to access beyond end of device [ 617.335779] loop0: rw=0, want=11353, limit=112 [ 617.342291] FAT-fs (loop3): invalid media value (0x00) [ 617.367250] FAT-fs (loop3): Can't find a valid FAT filesystem [ 617.378570] audit: type=1800 audit(1566319989.071:177): pid=25262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.0" name="bus" dev="loop0" ino=617 res=0 16:53:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:09 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0), 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, 0x0, 0x0) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:09 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:09 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:09 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:09 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:10 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:10 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:10 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0), 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fchown(r0, r6, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r7, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:10 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, 0x0) 16:53:10 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:10 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, 0x0) [ 618.779495] FAT-fs (loop4): bogus number of reserved sectors [ 618.800097] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:10 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, 0x0) 16:53:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0), 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 619.086297] FAT-fs (loop4): bogus number of reserved sectors [ 619.106682] attempt to access beyond end of device [ 619.113302] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fchown(r0, r6, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r7, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 619.157223] loop2: rw=0, want=11121, limit=112 [ 619.189719] attempt to access beyond end of device [ 619.219557] loop2: rw=0, want=11097, limit=112 16:53:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 619.252339] audit: type=1800 audit(1566319990.951:178): pid=25408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=624 res=0 [ 619.419243] FAT-fs (loop4): bogus number of reserved sectors [ 619.428690] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, 0x0, r6) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r7, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, 0x0, r6) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r7, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0), 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fchown(r0, r6, 0x0) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r7, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0), 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:11 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 619.929138] FAT-fs (loop4): bogus number of reserved sectors [ 619.941111] FAT-fs (loop4): Can't find a valid FAT filesystem [ 619.952748] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 619.980300] FAT-fs (loop3): Filesystem has been set read-only 16:53:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, 0x0, r6) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r7, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 620.211827] FAT-fs (loop4): bogus number of reserved sectors [ 620.217671] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 620.513710] FAT-fs (loop4): bogus number of reserved sectors [ 620.536204] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 620.816455] FAT-fs (loop4): bogus number of reserved sectors [ 620.847489] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, 0x0, r6) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r7, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:12 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0), 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 621.176109] FAT-fs (loop4): bogus number of reserved sectors [ 621.207717] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:13 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:13 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 621.373512] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 621.410472] FAT-fs (loop3): Filesystem has been set read-only 16:53:13 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 621.501579] attempt to access beyond end of device [ 621.516676] FAT-fs (loop4): bogus number of reserved sectors [ 621.529120] loop0: rw=0, want=12209, limit=112 [ 621.575208] FAT-fs (loop4): Can't find a valid FAT filesystem [ 621.579800] attempt to access beyond end of device [ 621.603652] loop0: rw=0, want=12185, limit=112 16:53:13 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x170, 0x0}) [ 621.656077] audit: type=1800 audit(1566319993.361:179): pid=25544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.0" name="bus" dev="loop0" ino=634 res=0 16:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:13 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x10001, 0x1, 0x0, 0x1000, 0xffffffffffffcfa9}) [ 621.874043] FAT-fs (loop4): bogus number of reserved sectors [ 621.892793] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:13 executing program 0 (fault-call:10 fault-nth:0): r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:13 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x37, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000000)={0x40e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xfffffffffffffe01, 0x30, 0x1, 0x6}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0xc18d, 0x6, [0x40, 0x1ff, 0x6, 0x10001, 0x1, 0x101]}, &(0x7f00000001c0)=0x14) 16:53:13 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:13 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:13 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r1, 0xd2, "6ccd7161e954349e14d60ba12b4f1809107d943a0be64f343d60dfd5035dc44fed1cc31b2d59c96cf852b3c2cfa2edb8ccedaa51784109187c21f606446cd428d9248e3f1ea1e48bb5525f234384582da813fa3d3418fe1a55fb9cf4567165c80434190cff43b0cbe9c29965bf05ca4b3cf235f1ee85093abf1f92fe1c195dea17fd680fefaa6d927f4d03662681aaaeb84024f0e77b23bda871208290a6462df4f5f4479500a68871090004b548a2dc1eae2d5c25558d8bd9bcca451ca304b4a4fb714989fe137f7e452ae593b5ca22b819"}, &(0x7f00000001c0)=0xda) 16:53:13 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffffff83, 0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) [ 622.247219] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 622.256248] FAT-fs (loop3): Filesystem has been set read-only [ 622.265976] FAT-fs (loop4): bogus number of reserved sectors 16:53:14 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='/dev/mixer\x00', 0xb, 0x3) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:14 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCRSACCEPT(r0, 0x89e3) socket$packet(0x11, 0xed8e4cbd9069b3c5, 0x300) [ 622.302871] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:14 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x92281, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x3f, 0x0, 0xa690}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) [ 622.608776] FAT-fs (loop4): bogus number of reserved sectors [ 622.621472] FAT-fs (loop4): Can't find a valid FAT filesystem [ 622.842436] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 622.850381] FAT-fs (loop3): Filesystem has been set read-only 16:53:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x40000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x300) close(r4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30990b768b88d27a92013b2d04abc3edb69c23645bbd22c3c68907763089d3763663d5badeace1a98606081938460c70bc22880e82a7e931543a10cce9cc27006d9271c43b6de94c10308ecdb2"], 0x42) r5 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000240)={0x1, 0x3, 0x2e7d, 0x101}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) socket$packet(0x11, 0x3, 0x300) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) sync_file_range(r5, 0x7, 0x0, 0x6) timer_create(0x1, &(0x7f0000000080)={0x0, 0x3d, 0x4, @tid=r0}, &(0x7f0000000140)) fcntl$getown(r3, 0x9) 16:53:17 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:17 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e21, 0xfffffffffffeffff, @remote, 0xfffffffffffffff7}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000080)="079073fe034f503d", 0x8}, {&(0x7f00000000c0)="6d1709c850a912159bf57cbb053541dada0f8667badfbc29c32e597fc52ed0a95ac5fe13c0f54bf0a0276cc51a152a0a3a7cabc18a32f992a25ced241fea592ecbd0cdf972a4ff73dd37ab1fd38146243f646601584287fa2f994516709a29295236b20dfd80f45f17b250fef0573cf191aba2e53efb82f1d4292cc99eff393d13e3084c04c7a5ffe5483dfecd4177747e974e37dc463e0a4c006f6b67b8bb01704c02ecf36fd9518e874e55ae8267612ca9f6cf34cda40cc3a2a7944008b26d384ba303ae632edaa9029d7062961b39192cf1b664cfc54c04c7e44900a23c", 0xdf}, {&(0x7f00000001c0)="df03c3b894a557e7b7030989fbfdaf6071886d7a414f0fc3636ed6bbda9b500e1225a3ff9fab2f897184df167fa7d51d2c96fc078b35c74a082878", 0x3b}, {&(0x7f0000000280)="41c8cbcc51b5294770a65fe2d79d1b0f64e8f50dd574639f3b21f2160bdce3d5c88bbdd390c75628ac813367746054975930ca22b5396b9e2e232000611e31510f4ae0a454e628f17ba2a2e3f8e3f3a227db1dc7db83f046f69afdfff06ea7db89185384c15b5afca56e88fc5f8ee17f6f6122495bca618660e6dc8ae92a8a2d19f6802dcca0ab2b9a1d48289440c19cbfbfd1f008d203cef5942cedf64d91dac7f6f78b086f179827d6b58134b3eca6c332c51d0eee8672dfc85360814b4efce8d18f202f6441001bacc4804566b4fa771284270ef09fecad5229b3743e493376c28ff310d142d0c44c6b3ab24750315defdea06ab5293aea7a", 0xfa}, {&(0x7f0000000380)="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", 0x1000}], 0x5}, 0x40) accept4$inet6(r0, &(0x7f0000001400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001440)=0x1c, 0x800) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:17 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:17 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x4, 0xb37dcf3e3181fa65) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r2, 0x62194019c1a246f, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x3) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:17 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0xaf86e871edb2d240, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 625.384168] FAT-fs (loop4): bogus number of reserved sectors [ 625.417285] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:17 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x4, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x80800) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={r1, @rand_addr=0xf0f3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) socket$caif_stream(0x25, 0x1, 0x5) 16:53:17 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) sendfile(r0, r0, &(0x7f0000000040), 0x7) ioctl$void(r0, 0x5450) 16:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 625.541296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 16:53:17 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x8) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x2, {0xa, 0x3, 0x4}}, 0x14) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x0, 0xdd7}) setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000140)=0x41, 0x4) [ 625.616660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 [ 625.666802] FAT-fs (loop4): bogus number of reserved sectors [ 625.669164] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 [ 625.693820] FAT-fs (loop4): Can't find a valid FAT filesystem [ 625.725917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 [ 625.827517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 [ 625.846626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 [ 625.874832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 [ 625.906683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 [ 625.919578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 [ 625.932441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=25672 comm=syz-executor.0 16:53:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0x6, 0x6}, 'port0\x00', 0x10, 0x20, 0x1f, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x8}) 16:53:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) bind(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7379737f000000000000006a6563745f723a12bedc9e000000006f6e743020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73303d73303a63302e6331303233203138343436373434303733373039353531363133202e2f66696c65300000000000040000"], 0x71) listen(r1, 0xffffffff) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r3, 0x0, 0x800000bf) clone(0x200c200, 0x0, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000040)=0x4) r5 = geteuid() r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r6, 0x69d6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchown(r4, r5, r7) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000000c0)) r9 = gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r9) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) 16:53:17 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0xb07, 0x9, 0x9}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0xffffffff, 0xe18d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x298, 0x0}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/116) [ 625.986270] ptrace attach of "/root/syz-executor.0"[25660] was attempted by "/root/syz-executor.0"[25701] 16:53:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:17 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:17 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0xa8000, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, &(0x7f0000001280)=""/115, 0x73}, 0x10000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) clock_settime(0x1, &(0x7f0000000080)={0x77359400}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000001380)={0x8, &(0x7f0000001340)=[{0x2, 0x8, 0xe4, 0x1}, {0xff, 0x80000001, 0x10001, 0xffffffffffffffc0}, {0xd3ab, 0x400, 0x9, 0x7}, {0x2, 0x100000001, 0x3ff, 0x2800}, {0x81, 0x0, 0x9, 0x67}, {0x100000001, 0xffffffffffffffff, 0x100000000, 0x8}, {0x1933, 0x7fff, 0x1, 0x6}, {0x0, 0x7ff, 0xe94, 0x8}]}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x1}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x20000000000, 0x20000000000, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 626.084309] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 626.119326] FAT-fs (loop3): Filesystem has been set read-only 16:53:17 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) sendto$rose(r0, &(0x7f0000000080)="e311876e", 0x4, 0x4008004, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 626.202059] FAT-fs (loop4): bogus number of reserved sectors [ 626.207892] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:18 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1b5f877cbad5b62c, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x4f, 0x0, 0xacd53d577047c559, 0x20, 0x3ff, 0x408, 0xfff}) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0xde63133a5aaa24d7) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 626.366436] attempt to access beyond end of device 16:53:18 executing program 5: r0 = gettid() r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x24000) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xffffffff80000001, 0x45f4, 0x5, 0x5, 0x0, 0x5, 0x8, 0x1, 0x5, 0x5294, 0x1, 0x6, 0x7ff, 0x3, 0x5, 0x5000000, 0x3, 0x4, 0x8, 0x57c7, 0x90d, 0x1, 0xb0, 0x4, 0x40, 0x6, 0x600000, 0x2f0, 0x3f, 0x48, 0x9, 0x7, 0x8, 0x4, 0x6, 0x1, 0x0, 0x8001, 0x0, @perf_config_ext={0x6, 0x9}, 0x800, 0x3, 0x9, 0x6, 0x7fffffff, 0x2, 0x9}, r0, 0x4, r1, 0x2) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000280)=[{0x7f, 0x1, 0x6, 0x2, @time={r3, r4+30000000}, {0x3f6, 0x7}, {0x2, 0x3}, @addr={0x7fffffff, 0x20}}, {0x8, 0x7, 0xff, 0x5, @tick=0xfff, {0x9, 0x9}, {0x2af, 0x1}, @connect={{0x6, 0xdc2}, {0xfffffffffffffffb}}}, {0xfffffffffffffc6f, 0x3, 0x1, 0x293984fb, @tick, {0x1, 0x69c}, {0x2, 0x3ff}, @raw8={"7fbb6333657c63c1ee8b8ed2"}}, {0x800, 0x4d, 0x80000000, 0x4, @tick=0xffffffffffffffc1, {0x6}, {0x2, 0x4}, @note={0x6, 0x3, 0x7, 0x1f}}, {0x2d, 0x9e, 0x8, 0x400, @time, {0x6d73, 0x6}, {0xcee, 0x8}, @queue={0x3216, {0xf7, 0x1a9}}}, {0x30000, 0x4b, 0x4, 0x7, @tick=0x6, {0x5, 0x7fff}, {0xfffffffffffffe00, 0x5}, @addr={0xfff, 0xff}}, {0x1ff, 0x81, 0x89, 0x0, @tick=0x4, {0x9, 0x12000000000}, {0x4, 0x8}, @connect={{0x7, 0x2}, {0x4, 0x5}}}], 0x150) ioctl$DRM_IOCTL_VERSION(r2, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 626.395770] loop3: rw=0, want=5745, limit=112 [ 626.404695] attempt to access beyond end of device [ 626.423108] loop3: rw=0, want=5721, limit=112 [ 626.437681] FAT-fs (loop4): bogus number of reserved sectors [ 626.473315] audit: type=1800 audit(1566319998.171:180): pid=25734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="loop3" ino=645 res=0 [ 626.502463] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:18 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x70, 0x1, 0x5, 0x4, 0x9, 0x0, 0x1, 0x204, 0x9, 0x36c, 0x6, 0x80, 0x51799fd7, 0x7fffffff, 0x7ff, 0x0, 0x1, 0x7, 0x6, 0x7f, 0x2, 0x90e, 0x40, 0x1f, 0x910a, 0xfffffffffffff800, 0x665, 0xfffffffffffffc7c, 0x2, 0x7, 0x2, 0x8, 0x62c8, 0x0, 0x80, 0x10001, 0xffffffffffff4acb, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0x9}, 0x400, 0x7, 0x8, 0x3, 0x2, 0x6, 0x9}, r0, 0x6, 0xffffffffffffffff, 0x1) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 626.814164] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 626.822106] FAT-fs (loop3): Filesystem has been set read-only 16:53:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40400, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x3, 0xd63, 0x4}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:20 executing program 5: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff5000/0x8000)=nil, 0x40, 0x4, 0x80, &(0x7f0000ff4000/0x4000)=nil}) 16:53:20 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r2 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:20 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x36a}, &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000004c0)={r3, r4}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x8, 0x401, 0x2, r2}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x4, 0x0, [0x40, 0x7, 0x5, 0x401, 0x400, 0x3ff, 0x1, 0x9ca0, 0x3, 0x33, 0xb5f, 0x4, 0x9d, 0xfd, 0x100000001, 0x1]}, {0x10, 0x0, [0x2, 0x5, 0x5, 0x80000001, 0x2, 0x100000000, 0x1000, 0x8, 0x7f, 0x6, 0x80, 0x7, 0xd4, 0x6, 0x5, 0x77ae]}, {0x20, 0x0, [0x391, 0xb15, 0x1, 0x7, 0x8, 0x1ab, 0x1, 0x101, 0x80, 0x401, 0x1, 0x1, 0x8000, 0x36213503, 0xffffffffffffffff, 0x200]}, {0x2, 0x0, [0xc310, 0x3, 0x9a, 0x58, 0x9, 0x4b, 0x3, 0xfff, 0x5, 0x9f, 0x6, 0x1c61, 0x3, 0x2, 0x4, 0xffff]}, {0x11, 0x0, [0x400, 0x8, 0xff, 0x300000000000, 0x1, 0xfffffffffffffffb, 0x9, 0x5, 0xf1f, 0x5, 0x400000000000000, 0x9, 0x4, 0x1, 0x0, 0x4]}, {0x4, 0x0, [0x4, 0xc312, 0x9, 0x9, 0x1000, 0x5931800000000000, 0x0, 0x100000001, 0x8, 0x7f, 0x7fffffff, 0xfff, 0x9, 0x6, 0x7f, 0x9aac]}, {0x7f6d874309ec4473, 0x0, [0x7fffffff, 0x9, 0x0, 0x6, 0xffff, 0x9, 0x7, 0x0, 0x9, 0x0, 0x8a, 0x567, 0xff, 0xfffffffffffffff8, 0x2, 0x7]}, {0x28, 0x0, [0x4, 0x1, 0x2507, 0x8, 0x101, 0xd11a, 0xbb45, 0x40, 0x1907c0000, 0x295, 0x1, 0x3, 0x3, 0x5, 0x81, 0x5]}], r1, 0x1, 0x1, 0x240}}, 0x20) 16:53:20 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x40) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:20 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_CAPBSET_DROP(0x18, 0x23) [ 629.120342] FAT-fs (loop4): bogus number of reserved sectors 16:53:20 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r2 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000180)={0x3, 0x1, 0x3}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) select(0x40, &(0x7f0000000000)={0xa9, 0x1, 0x800, 0x7ff, 0x20, 0x9, 0x2, 0x3}, &(0x7f0000000040)={0x800, 0x4, 0x9, 0x0, 0x800, 0x3, 0xfff, 0x7fffffff}, &(0x7f0000000080)={0x74f6c624, 0x4, 0x28000, 0x0, 0x9, 0x4, 0x7, 0x7}, &(0x7f0000000140)={0x0, 0x2710}) ptrace$cont(0x9, r1, 0x0, 0x0) [ 629.174233] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:20 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040), &(0x7f0000000080)) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000280)=""/4096) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) clock_gettime(0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0xfff, 0xfba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:21 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:21 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa2e, 0x400) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @bt={0x7a6, 0x7, 0x2, 0xe1, 0x8000, 0x7fffffff, 0x10, 0x3}}) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={"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"}) tkill(r2, 0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$pokeuser(0x6, r2, 0x1f, 0x8) ptrace(0x11, r0) ptrace$cont(0x9, r2, 0x0, 0x0) 16:53:21 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r2 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:21 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) socket(0x0, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="260000001300abf1eb14c1f8000322ff001000e31300000009000068000000000600030012", 0x25) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="207eb34b9904900b1fc9913abdb9a45e88fb000016f632d47e8c37d53a20733888e9ce67cdff2eafe51f817efc6dcf980744fda05feb0e74497390a97573bf7c1dcdcae0e46f15ad1f27f04e3f91677468602271f998b0d98ec889e6c0d4ecc010829001000080000000001ae22f553d8352c53eb36c7adf4c2924ae1acefb1d0193f9b157ed7a723421e44f8c77dea3bdab52676ccae361623591573be1d0e6bc3fb00c2dad9d"], 0xa7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file1\x00', 0x0) pipe2(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@local, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_gettime(r0, &(0x7f0000000040)) r3 = fcntl$getown(r0, 0x9) sched_getscheduler(r3) [ 629.448329] FAT-fs (loop4): bogus number of reserved sectors [ 629.468281] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:21 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) 16:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:21 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(0x0, 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:21 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) [ 629.921878] FAT-fs (loop4): invalid media value (0x00) 16:53:21 executing program 1: r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x15) write$cgroup_type(r0, &(0x7f00000002c0)='threaded\x00', 0x9) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3ec, 0xa00) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000180)={0x0, @motion_det}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000140)=0x39e, 0x4) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000540)='threaded\x00', 0x9) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)={0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, r3}) pselect6(0x40, &(0x7f00000003c0)={0x3, 0x86, 0x0, 0x8001, 0x4, 0x2, 0x80000001, 0x4}, &(0x7f0000000400)={0x3, 0x8001, 0x5, 0x0, 0x9, 0x0, 0x7fffffff, 0x8}, &(0x7f0000000440)={0xfffffffffffffffc, 0x100, 0x9, 0x8, 0x5, 0xffff, 0x1, 0xc7}, &(0x7f0000000480)={0x0, 0x1c9c380}, &(0x7f0000000500)={&(0x7f00000004c0)={0x3}, 0x8}) ioctl$DRM_IOCTL_VERSION(r2, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) finit_module(r1, &(0x7f0000000580)='\x00', 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0xa71, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x5f) [ 629.965583] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:21 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(0x0, 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000100)={0x7e}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x22000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x3, 0xffffffffffffffe0, 0x8, 0xac54}, 'syz1\x00', 0x4b}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={r2, 0x2}) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 630.256224] attempt to access beyond end of device [ 630.293342] loop2: rw=0, want=9713, limit=112 [ 630.296839] FAT-fs (loop4): invalid media value (0x00) [ 630.330424] attempt to access beyond end of device [ 630.336929] FAT-fs (loop4): Can't find a valid FAT filesystem [ 630.361459] loop2: rw=0, want=9689, limit=112 [ 630.384315] audit: type=1800 audit(1566320002.091:181): pid=25893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=651 res=0 16:53:24 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x3f, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:24 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0xfffffffffffffff9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2fa, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={r1, 0x80000, r0}) 16:53:24 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(0x0, 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x8, 0x4) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0xffff) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x1, 0x0, 0x7f, 0x7c0000000000000, 0x0, 0x0, 0x20004, 0x1, 0x0, 0xfff, 0x78b3df68, 0x20000, 0x8, 0xb966, 0x9, 0x7, 0x3c9, 0x8, 0x1, 0x2, 0x0, 0x4000000000000, 0xb92, 0x200, 0x0, 0x3, 0x2, 0x8, 0x5, 0x734c, 0x1, 0xc4d8, 0x907, 0x401, 0x10001, 0x1000000000, 0x0, 0x80, 0x4, @perf_config_ext={0xfffffffffffff000, 0x72e}, 0x200, 0x4, 0x8000, 0x4, 0x4, 0xff, 0x4}, 0xffffffffffffffff, 0x2, r0, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x3, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) 16:53:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, 0x0) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x620081, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0xa, [0x0, 0x1, 0x2, 0xffffffff, 0x9, 0x1, 0x1f, 0x6, 0xfffffffffffffffb, 0x69]}, 0x18) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="0a0775b005", 0x5) r4 = accept$alg(r3, 0x0, 0x0) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x141}, 0x0) fstat(r1, &(0x7f00000001c0)) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x400200) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$SIOCNRDECOBS(r1, 0x89e2) socket$inet_udp(0x2, 0x2, 0x0) 16:53:24 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r2 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0xe405, 0x9}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:24 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000440)) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000003c0)=r4) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4200, r2, 0x0, 0x0) tkill(r3, 0x10) ptrace$cont(0x18, r3, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) prctl$PR_SET_PTRACER(0x59616d61, r3) clone(0x10000100, &(0x7f0000000240)="2938fa2d36f5e3169aca04c4", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="b0a5922786bdec5ae8aa63841d4491ea2778a670adc679711e33e4c1c104e9925795de1b69cb4511d6c91ced2ff72f5f3c6408ba0f5bad6794633219aaf99ee68006a102190845b65b2f7c0cd1cc1a0be83c68d1aeea902a9f3cca75323f000464457fc718dfa429d3251c22e4b607f287d52668fb4ccb015214f2b123ea6d98c9772addef7bca629609c4cdb40515252d1fcd4897b0e39d382eecee6b5956778fd7b957dc7af9de9965a27fb8d26e") ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000200)={0x54, 0x27, 0x14351d6a, {0x81, 0x1}, {0x5, 0x4}, @cond=[{0x6, 0x7f, 0x6, 0x1, 0xfffffffffffffe00, 0x1}, {0x0, 0x81, 0xde0a, 0x0, 0x7f, 0x7}]}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x9, 0x2) ptrace$cont(0x9, r3, 0x400000000006, 0x0) [ 632.533658] FAT-fs (loop4): invalid media value (0x00) [ 632.546495] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:24 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000040)="0a47cabff922a0c7562a7c171fc6106e46fe856ddd5dea3f0c74535a1af232727d52c1860d19c76d1dba6acbb1c79c7fd0bae2d1e38b93e59dedaf684df16c8df899e47b69ce0a4e1b6abcf230f067afe649c0ebd52f72fc0a8c6d69a0a1d50f211195aec3f3e8d1673afc99a510daf02c9bd5b2ff833437d056526596045c5eece3c6cc53f71c62f547c74a516684b14a1e4eb979b4ca0ba2", 0x99, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x1f, @loopback, 0x9}, 0x1c) 16:53:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400404}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x29}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4d0b3f9ac440b7b7}, 0xc800) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x2, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 16:53:24 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x101000) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:24 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x100000000, 0x0, 0x100000001, 0x0, 0x0, 0x292, 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x118, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xf8, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x854}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @remote, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_SOCK={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8010) 16:53:24 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r2 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 632.814416] FAT-fs (loop4): invalid media value (0x00) [ 632.837607] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, 0x0) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) write$P9_RSTAT(r0, &(0x7f00000000c0)={0x50, 0x7d, 0x1, {0x0, 0x49, 0x862, 0x4, {0x18, 0x1}, 0x80000000, 0x8, 0x1f, 0x7, 0x1, '/', 0x9, '/dev/ion\x00', 0x1, ',', 0xb, '/dev/mixer\x00'}}, 0x50) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xc0000, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x1) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0xffffffffffffffcc}, 0xfffffffffffffc6a) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000001c0)={0x86, &(0x7f0000000280)=""/134}) 16:53:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 16:53:24 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r2 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:24 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) sendto$ax25(r0, &(0x7f0000000080)="021d3613eeb56b1e81bb9bb803ab08d28c38024afdc7cccfd5bef2332ebfd55fdabd4541f49fcb8cf75bee113202996d596bb908741b0ad3d1c9b400462d12bd3ef9d495cc7a8119bf75fd5609582801db21f9dde9d77508592ce917f91a76b42730b0009443b931e4eb3f3238924dcb0fa6ddd40b18d3c6d141bb7ea80ea1d8e7fa116c09f3729d64e9aff8b3b1bf28af238cfb308b07e6c6ab703e9e768a4864bc92dd33c2d4b919ebb4d0ed34", 0xae, 0x40800, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast]}, 0x48) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:24 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc66, 0x0}) [ 633.319394] FAT-fs (loop4): invalid media value (0x00) [ 633.335096] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:27 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:53:27 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f00000000c0)={0x3, @null, r1}) 16:53:27 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:27 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) modify_ldt$write(0x1, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x6, 0x5, 0x9, 0xb58}, 0x10) 16:53:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, 0x0) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:27 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:27 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={r1, 0x1}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:27 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/39) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000080)={0x0, 0x1c8b872, 0x0, 0x2cb, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x0}) [ 635.820805] FAT-fs (loop4): invalid media value (0x00) [ 635.846016] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:27 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x1000, 0x0, 0x5, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:27 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfec1, 0x0, 0x6, 0x0, 0xffffffffffffff23, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x6008}, {r0, 0x8000}], 0x2, &(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)={0xffffffff}, 0x8) [ 636.128243] FAT-fs (loop4): invalid media value (0x00) [ 636.133689] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400000, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x48802, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x800) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:30 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x69) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:30 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7e, 0x8400) write$capi20_data(r0, &(0x7f0000000080)={{0x10, 0x8, 0x0, 0x83, 0x2, 0x5}, 0x71, "0929422615a3ed923543f9aee70409598e2b7a12ad0d0fd5338229a1e4281a2416f54ea62cde64d3f761b38d37ec31ab3ae3671e9714360c3db74e8d3e1a68d9e818b388a7678864d40ab098025775249cc3dd645572e959042827af0fd01a13110e8972d804dc8c076ba653f105e08ef8"}, 0x83) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:30 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x10, 0x2}, 0x2}}, 0x18) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 16:53:30 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) [ 638.868694] FAT-fs (loop4): invalid media value (0x00) [ 638.898756] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:30 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x134) 16:53:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:30 executing program 5: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x20, 0x400100) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x100) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x100000001, 0x8, 0xfd}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xffffffff, 0xfffffffffffffdec) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) [ 639.145961] FAT-fs (loop4): invalid media value (0x00) [ 639.166530] FAT-fs (loop4): Can't find a valid FAT filesystem 16:53:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x1000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:33 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000040)="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") ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000280)=""/229) futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0x2710}}) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:53:33 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:33 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x448201) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'nr0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x4, 0x7b, "650b08ff283e4f4bd4ff5d30629d0640b1eb64b35976c21e85cbef14ea1c57553da19a742d0b196a754af39a1c3de7e4220a4518e8d977fe800c5a5b1b4632c164062c71446c10073ac7c1edadffa14cbbb9e38fcccc9d522bd197ff123dfdd9db2e0a24b9252c60481fe33aeba4dc79d62ea717448de4b975fab7"}}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x4, 0x0, 0x1, 0xfffffffffffffd9a, 0x0, 0x0, 0x0, 0xc2, 0x0}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000180)="42670505f978757c36094fa40d4a8fffa11a63a125ac66ca35dfb9de9a5deff238ff57c88abf808530f9193d6cb05e28f999e9f3466caa8d2a644e445a261bfb3df5bab38b632e81cdcbcd99a42dea802a805caa904324f51c550c7915f8991f98106d8819b3eade7fd686957271ab6acf9fa06d60ea54a799e749640b6ebd031bcb6474582ca312ff", 0x89}, {&(0x7f0000000280)="c211c154fd418445058a9976f4e5129b5d7f1cacb04602c2f72c2c89c0cb3c5956253d806b9999c6fba1bbdb84bed24fd40b2338637478f32f7c3efe1b55bab05ed5e9f0537a4a9415870620c56a7c912342c1efefaefc54852756dd0455ba33893f407157a95513ef80688042d5fb09496e72b2c0e7c98146fb53803ac553b4cf05f9b972b347ca5598d9f185ab", 0x8e}, {&(0x7f0000000340)="162a5ad0733172750027a82230ee4de6c74e598906910408dc0cadbfe746292d04e2011641bd8bac41f5a74d4d7f44a256e001716689a2f258769da17b0fbbacd3951108ac4763f9a11d06399595d8aa89469be0bb6c88ad86c1cec49fef225aad7201e0bbabdd601b7a4acc195d6a5db2d16968b141f562c5671a5e36be3bbc6e6e2a3b40fe493c621db2006fb4d40884ff60687b461ee9534d4ec33ce08c860eb10a3f653ccb51faa16520fd1e08dd0a44b76de2f4726baae24a071a7ef800aaaae94d83dce79b5539f18479c4f25441c78dde049918abda64f8787983c54df3b58a64f2c592", 0xe7}, {&(0x7f0000000440)="73c65abdd58048ef7f0d1c030fb308605aadac09c0c5d640c17a5f61466ba25493d51477e3713a41fcf2cf866e6f4edb55b347e9137a460f6d3cc4f135e182b23a55d62bd40de679dcb936505cfa66e8a675ea10f6f6d6e02268776b831a68d5aca6f11f1d053cd3372c6b4d6d0f606c52e5f2742f359a7c7e9a3884f6482e0cf1c7dddd5cd2b8d66b9bc9aef1490ba9a5af1b5db89179ae0f5f2365cc58904634e62c", 0xa3}, {0xfffffffffffffffd}], 0x5, 0xf) 16:53:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) quotactl(0x1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000240)="28f1e3087fce2d0a784d66184599ca55ac3157f0f0fbd3acbc96c98d5512b9c14a3a2e67d01485d69e35a3d8143a474608bf61e953ee8afdc7221b74e291c81326a090f4bb3e4b0c99c31fc23315143b4a889510587f9bcb4c392ea8a025a708872e3a93f932b9fbc2b00c7f5ff0d437f16cac814baac6370c097d342a129cb3dc850efa6fd8c7") r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x2, 0x400) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x86c1) 16:53:33 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x4]}, &(0x7f00000000c0)=0x6) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x5, 0x0, 0x3, 0xffffffffffffffae, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:33 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000340)={0x6, 0x80}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x4, 0x4}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={r1, 0x6, 0x80000001, 0xcfe, 0x1000, 0x10001}, 0x14) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000004c0)={0x4, &(0x7f0000000540)=""/217, &(0x7f0000000780)=[{0xf7e, 0x0, 0xc65}, {0x1, 0x36, 0x54, &(0x7f0000000480)=""/54}, {0x9, 0x9d, 0x1000, &(0x7f0000000640)=""/157}, {0xa7ef, 0x6c, 0x4, &(0x7f0000000700)=""/108}]}) connect$netlink(0xffffffffffffffff, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x8400000}, 0xc) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x80080, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000200)={0xc13f, 0x5, 0x7, 0xd3, &(0x7f0000000040)=""/211, 0xa5, &(0x7f0000000140)=""/165, 0x4d, &(0x7f0000000280)=""/77}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) signalfd4(r2, &(0x7f0000000300)={0x6}, 0x8, 0xa795ff40857f9f63) 16:53:33 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:33 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80080, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x181000, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) 16:53:33 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c8, 0x0}) sync_file_range(r0, 0x13, 0x6, 0x2) 16:53:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:33 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0xe, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x1ae, 0x1, 0x0, {0xedd}}, 0x18) 16:53:33 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$llc(r0, &(0x7f0000000040)="1718ac90cb07634793c144fadcedbf08344407cf", 0x14, 0x800, 0x0, 0x0) 16:53:33 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) write$uinput_user_dev(r2, &(0x7f0000000140)={'syz1\x00', {0x101, 0x1, 0x250, 0x5}, 0x17, [0x4, 0xfffffffffffffffe, 0x4, 0xf9c, 0x0, 0x3, 0x9, 0x7, 0x800, 0x101, 0x5, 0x7, 0x1, 0x59b6, 0x7, 0x6, 0x100, 0x1000, 0xc92, 0xfffffffffffffffc, 0x55c, 0x1, 0x8, 0x100000001, 0x1ff, 0x8, 0x0, 0x631, 0x3, 0x80, 0x3, 0x20, 0x8, 0x0, 0xed9, 0x693, 0x3ff, 0x81, 0x0, 0x6, 0x4, 0x5a, 0x7aec2b52, 0x100, 0x101, 0x8, 0x0, 0x2, 0x8, 0x7, 0x2, 0x8, 0x0, 0x4, 0x101, 0x8, 0x7a, 0x5, 0x4, 0x35e, 0x80000001, 0x1, 0xfff, 0x2], [0xc5, 0x80, 0x5, 0x9, 0x6, 0xda, 0x9, 0x8, 0x0, 0x100000001, 0x7fff, 0x5, 0x2, 0x0, 0x1, 0x1, 0x8001, 0x7, 0x1, 0x0, 0xffff, 0x400, 0x3f, 0xc00000000, 0x3, 0x82, 0xfffffffffffffffb, 0x95, 0x5, 0x4, 0x0, 0x1, 0x7ff0, 0xf8, 0x1, 0x1f, 0x4, 0x5, 0xa1a1, 0x0, 0x800, 0x4, 0x8, 0x8, 0x8, 0x3, 0x9fb, 0x4eea, 0x8, 0x8, 0x8, 0x4, 0x8, 0x1, 0x3f, 0x100, 0x8000, 0x4f40, 0x4, 0x7, 0x275, 0x662aa709, 0x6, 0x9], [0x1ff, 0xffffffffffffffff, 0x3f, 0x494, 0x400, 0xf0, 0x2, 0xae4, 0x8, 0x4, 0x3ff, 0xfffffffffffff7c9, 0x200, 0x7, 0x1, 0xdb, 0x8001, 0x6db, 0x8, 0x2, 0x6, 0x6, 0x7, 0x1, 0x8001, 0x2, 0x2, 0x7, 0x3, 0x8, 0x5, 0x4, 0x0, 0xd7c, 0x3, 0x1b9, 0xafdf, 0x0, 0x4, 0x101, 0x8, 0x7, 0x8001, 0x1, 0x7fffffff, 0x9, 0x4, 0x8, 0x4, 0x6, 0x7, 0xb93, 0x5, 0xfffffffffffffff8, 0x9, 0x6e5, 0x0, 0x9, 0x9, 0x0, 0x0, 0x2, 0x5, 0x101], [0x8, 0x0, 0x5, 0x7, 0x2, 0x3, 0x9, 0xfffffffffffffffd, 0x3, 0x4, 0x4, 0x2, 0x3, 0x5, 0x6, 0x6, 0x0, 0x2aeb, 0x9, 0x100000001, 0x8000, 0xd259, 0x6, 0x7fffffff, 0x8, 0x4, 0x80, 0x5, 0x80000000, 0xead, 0x7, 0x1, 0x1, 0xfffffffffffff800, 0xffff, 0x800, 0x4, 0x200, 0x1965c0000000, 0x9, 0x6, 0xb4, 0x3, 0x1ff, 0x9, 0xcf0c, 0x3, 0x20, 0x3, 0x6, 0x7f, 0x3f, 0x2, 0x80000001, 0x5, 0x3, 0x2, 0x3, 0x0, 0x9, 0x0, 0x80000001, 0x4, 0xffff]}, 0x45c) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000006c0)={'broute\x00', 0x0, 0x4, 0xe1, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)=""/225}, &(0x7f0000000740)=0x78) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) sync_file_range(r2, 0xff, 0x3, 0x7) 16:53:34 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/161) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000100)={0x80000000000000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffdf0, 0x0, 0xfffffffffffffe12, 0x0, 0x0, 0x0}) 16:53:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:34 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101100, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x4d, 0xa7, &(0x7f0000000100)="11498dbcd56ce7baa006f230c977611e0f858f31a205e214f1d9927323fdb54fc11be428e1032555d6ef93e397e16cdfc0fa7ad4dacf12edb90935e462925f0b469dfb4d8443cd1b2dcf92d7bd", &(0x7f0000000180)=""/167, 0xfffffffffffffffb}, 0x28) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xf, r1, 0x8001, &(0x7f0000000000)="808bdb8e5cbf8a0463a7255c7a16365699fb8f9278fa753e22fc1301a6127d1bf38d734db1bae72f9001189e4d0d81c894f9e6ac98aa5b81058865ed2c858656e58b27663956629c19f92e0c6b409a0831100a70618ac4140e97b6fed476e6de2c280634222925") ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:34 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x20002, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffbe, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x9, {0x1, 0x3, 0x3}, 0x10, r1, r2, 0x7, 0x40, 0x0, 0x80000001, 0x1, 0xc0, 0x8, 0x808000000000, 0x1, 0x7, 0x1, 0x9, 0x3, 0x3, 0x6}}, 0xa0) 16:53:34 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgrp(0x0) r2 = geteuid() stat(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(r1) r5 = getgid() sendmmsg$unix(r0, &(0x7f0000004080)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000000180)="eb1b57fb453f98ee7893996c6811b1750b47b7a3c095cf68ce4d7b7d85ff078e3ee9b8fcf7c6ce76898a4a4930a0e4e9afcd4dccb9465e8eb0cbb455984ffcd38fad76a41ce07e2f136d2c5308f03fc2b136ab555c", 0x55}, {&(0x7f0000000200)}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="8df5ad44c643c66897896fea9688d72602e390186c264053e3885ca2f649a0d64e130a3e635c300e5fcac19ee7a0cb7ede37bd064ed8bf2c1535097ffc47788df09abecf807dcf5efbaa56edd3e96010ed4a665b1e91557359f73a0ae7f5f47ec4b0170804136c5ce2a16ed165231284b3796512b7bec799f85715baf3d95a9155a92abeadb92f3824c3184947432ddbe3627931c604a306f0f128c3b3f96c20a7498bbb93940bf495fcfe753a236d99d71023e819af400d5b1f6a3b2f1c2e70b06b65d4f5a2a39648f97ff449ff0d161216a5cf554c0eb424a88baff19c4a3bee2de24baf3d358c", 0xe8}, {&(0x7f0000001380)="c466814fa0bb2e0a85539f608ed706d6", 0x10}, {&(0x7f00000013c0)="3143c55075853bebb9e6652db9bd97a58e18e021a6ad13b9e6bdca30ab02449a957a5d13b8bbb008650ef7821253d325c4e09ebeae33abfc78903ce6a8e9e75f4cf29a9619de34d18dfaa2714ab1c323593fc682e096baab879b1bae47a29128160d404d2a0fe2b8e9dad2af98e51a29e8f5807a8e9a71a3e0b97d84a6844a06c6890fa54103386c57c5e16b5e80268b0b44343b75a56cab8d9539d358a667bd979dddc3fdfec4fd40b4cf5ca665a52005a150882793c20c9fd22bb464c2afa3b50da975427b1fb35f3acbb7f28151646ba4c4b038f467ed4cc96733fceabad5ccbd94f121275c303b30fc3805141cbadc042e5e32bb75f1dbbd1c88b58372978bd694388eae03a0ad86c0bcce7bd4b1563686cc837d87d7b74f9e0cefffd0804dc2fdb9e77aa3cc5325e905bbca09eee35d8c960d578fd678180e0f6beb0c683d37aee8484bcce6474d48180062c05e15000b4e39db3a5f6663f2231ffccb4d0be63573c7a6d981131f248b98dd2b694f19f0d0669735220ccc632e528e2ebbff37098ab9f2f7a1b13f843e228d241584a4c1cdac8fdcf7986dfaebea5ac79e18fcdef30af6223c09883f90c02c8fc8cd84e8441f1c901a709aab0a668e5a999ec95268902ba72e6981749a86c9e5c22769870f88f939e74d5792e072e55bacf6c04eef6ee5ae9626708d7f7c442de7b1b01f0e22e82cff372b2224fcb90e89da834dba1ac54f80e570ba1afef0a6df3062e6b720a75e43ae09a62bf8fd98022206a2eca078202a6d00481d0138ffde975fd8a3893cc6b18178ce75b5ac675329d18b6ee2bc95c4620a441ed3d16c5b08f865b86e9cea2c751f541e96b342f1a2db5180d474c6f445cc90ace0b6a25966eb08db21db60c03edd4fcf8ddd78c1e3ac2da98c16a09b31034f758226b3f39b9df5b7be64ee6f31ee262c280aed71081f3adaabe06169f13bde459cae7d21dedf7fbf89c5a2aad7253687335254a6d50ed2125301d579f5434a43ef80b7438f1e44e10302ce87e8e6061b1ed0d0ab4b370fc913c06691ac2ec3f060987067f12afcc495db913b2c5f44e626e401c4858e741c0de7e56cb30687c989a2da142b2b0b754edcd2ee5311251edcad935bedd9d72933405abd7e7ac098ac4a6203a7e7b6dae108666cf4d5334508bb0ecc9b2b51facae56d02e17db1d38ad16743585830bd2a57ad70827f93f9a14669f7319d30f467713c98b335db229a6b65982828a7d4fe5b4c7e43e3d97facb137ef1b63a5ef55c4a8b4e528e30a9a96cb5c1e6f433a001bec18b33f12bb618e8ef12a49863d038a4a36bc7a06268fe8680371136e74b5e540c7cde45efe4167fc8908135347666346b5c9fcb0ce655ebba3c0c6df38a98924e14658729cd11e3cb77a98a9fdd3faa380c76c2428a943e655500c04bb58efb8fefea71aad4b28378963cf1e06bab8189ac36cf00512b6accf496ed393399d0255065f11ee57e43c78de7e939ba0f50b3b70c7ababe8c270bbc575e860236c28a715115b327e08f658c4f5d625c08f9e8cdd8154b08935a3bf7cba3a74e2f6e5a42e04a1ad8d985b41c7a6124a8279d893e13d9991e94825995a1854519bc5b5eba15960d420336e889fcb14484d1e85ba7e8c01dab8ac8fcf4ff4062f2b1c76292cb49d98b702eaf52eaade26f796e04f23f85ee68dcdea97ea9002f5d9eeb7c05511999ddad1da0adec39442e87cda85945d913fb5e4c1627510ef7422c623859319cb3eacde209f50ee6f6b4f4a2556e495cef4c28511d7556f506762c26ad56eee994d3296b4ef748be7b09bb959aa3addecb65cc94a1568e38fa8cb5d62f0c0f9f42357665c81dd1c8026950f16f79850a3006f0f27cb97225f979e6f7df32276e3ca7cb86dbbf3d43efb218afed4d6d801bccaef6fe883c0b96c0151cacbec22677a948bfa294ef1d7475cc86399abb6cd2b4f67ad876cd21b612754682ba4065b763f7da4127232428892f683346562f20d1f8236156f55a5f550b48b7a8fb2d20995c6782afba1efd114991e57a6dd87276a1e46434e5f67097da50663ceb6f1002df6c51b341b84696616866af531333309406a02338598929e35fb1e696ddd3df0edd3ddc61bff4439ca7a09ad772366d4783a3f0e94286f873c62d995f7502f8350763b21dcad53f2acf8274f751428359b992603e3ff9d96db81268e98dc2e1e58535229bb2af50b11122cec70c85981120a1d47bc552ab0baf05c500aed751eabc6a1634020339141f0455f479f8c0d630ebec8f88f96ebd989fc7cf1864de40178d3b7a1c674241aec8d37dc277930405a4497218510e45e1d6af9bca4240f8be08b05006ebc563290d8f350b24438af3969875b9266f5ba9e9945c095701516dafa0a467b6584ef4069fbe3635c3f3986f5e43515d1c8fa3d4d5b488b14c0c65f0de961a9e9825538e7a06848db48528f2034896d1f2f1c0228c35605546777c909cd47cee6b124ef79ab6b4895e980bc23d2cd4a2b61aff4a7bd4a10db69bf6e68e9edba2005688c85d1f4dedefd6de861cb24d18741a96d4e38e813effa0fa678e99726e81a706116841fd89112e0bbc86218304cbb2f97a645b8af7437a2b15a0bb628a474d511d5f21fffaffa2f821c11b4a882f5fc175e33f894d122c152824aafa82a504483c3da68a8e3172e17e1b6474992d1870aac872bff7fe08dc2386018481b1ffb55b6ba9cbc1333365777ae65970c2cd425b24fd61a2efda66b2d3dc657b3f0f38f7572477d605f85fe5ebbc4b37cb74fba2d8b635df7e83963d5e6bc7c71992b93e8032973da7b6d4dccdf05c2d13eea81ddeefcdf8759ec6502527711ff15b250678ab66324d69d8c385f733d1e9a3c9e7e2c7d75de5c62abb8c4c19e5fc480069a8445717af9af02bcc750f638c50ccb5b3bc3f40bd4c2891c7c4f8e389ec713627f6c1c1c306412d9fe8129c41d158ecb84615dc87ee6bd81e3625d69173639441d691e83ed72e1c0ef3426b0e1d7afa6cc434e8200716ba4f9be079a2fee2367d44821c96dbce75566494d3e06d26b125bb696c63b6a80409de03c55a4e4b4f61d50858191ebaa0af5b543f9d51057a6c1a811dbbefad8bbb8cf98294e1c1985f9ee6228920b653325cc5d438d79f00b66f8956162d859b5ff8238d796a3dcf20ab2dd8d38427dfbf66ccc61cfb7958ca4a74d83665bf952cc4ec11903cec3752ea04017379355ed5ee5dd06bab44c95281f26793ab198977fdad9c20ddba599628fdab417e25790edda93675901cd62e30f5a314159bdec1d713a798efef46bc3839f3c5e64e3bda5e96fbd54a0efd7b985c08393f96edf21cc67dae80c8f3937ccf747493b098f4f2e8dbe180bdef78e2d4488435bdacaaeaa542c186d5c819bab214cefe8d237c8ca4649439c3d5b4fe7371cd91334d0ec8c3167ae68e9ef323347a9a7f732e358cd2df8853b8afaaeccc5bc234346b5c11e5ab8cfe6e54ac5c1570b0b4117ea6f60518e25657b4c7e8dc085e9e48eafe3cef7ad87103cca740edbac9079ba10fd4914095fa150641d0931be1bfb7bde133f87ec5c256e502961ba81babdd3a7b7645aeeed2981124b49cf3dbea2c092b3b699cdf94a29bedda57f86fe390f535b32579011c80831fcbf87c2ee7bb73e4c6a4b2d92edead08b57ead69f8e269df1e04378640fdce268a20bf829c3663535b7e98570a4087a8d1caa96212032cd535fea0217868bbbb7acab53aaf4f3ce51ee8d513f1fa6623d00a83e374517a21aa5e21a39e4c898448fb6f50e78054f865603e41157ffbdc76c036881ebed325216504f7c3d346e508ffcc68f64791645b637452fbf7fa863cd50b22e040435e9e8ce3b8f7e8db28d1343587d77e510a977fb817c48cc4f94a0572d41d13af4f8310cfe80f22298800ad4171611ba58f1399fb9ed13976db4a38bc3a9c506709457395dfdb4cb30f83a3d797c93788c76508da80a06ae7a01ae71614923d6e55f10f92647e9568fb77207e25f58ef0fd5930aee34eeba12e3da4dbf056c76aeaa19cc1be5277a8e78d9da503198e1f2ebb3f9464727840b83a8ba428c7fb1c41b12bda439bc3a319ab395e548b9b8b2a72c21f8ddbd1fed4a9161c2360284e1a8e455e7530c828a729732e998f5313514541e70192d508c1be4cc1559f136ab39f6135784012eb84387f09761efcb0ffebaf1385b0b766b3a47d7460299f4c845d27450500db70ed6a855930d09ceb2df3e15e7a8ebff285dae5f334150aeaddbefc03e1ebaa41c36ccbc304176a127802a98bb676ae155ccc8b47c0f49f413261e3224f4780d463a795fae06ef7ac78eee0f0844e2fe90f1504648ba937de7ecc8deb30e85532c08c1345a46d7d2bab457be803783b4ca9d931e985b1a68ec59e99d698f8452d81c159868bb804a8aee310628415478a3f0325a950e0540995746a1e670c83ad05453e678e54c12647ab4e0b7ee627b17d71a3a941e580c13e4ffbc32c0e5ee1cadd1534f3eed40d04cf411e7d43ddd0de15d6dd178be92231557cd8280f510b82f27ddf5d8c0276b62227b84fc8c7bbbd5ed1e11b894bd1e6ee9bc09bee6c72e17e69b813af56845b6d324b46ff770f40f7fe78dd925ace957c2584ecb718344b814a46eac469f3403ded3d2951e776b893a343e1c2fa8f43ed07915f99bd832e4c88f44e088603ac95d6361e4742171138a2c8eb30b2464b05d2a9e87d1958ba435a8c3bf9fa4275ee74a5bfcdbd4e7cc5fef762c80cbcbebc1553f735a1b34d572aa35a915725925f8a28b7d27f1077ba7d9412ec1f1dfe1278f03dd0d8470dd2dabd7288691b7e9e5efaced1e433b7fc5b52f9bbc32717574da27a145f1328adefc9aec0d67e1a7eeedf1207af8d2f6fa9159bcb49cebea1810f70f4ecc55e7bcae9f6a59b17ed60f9e14aa05009460e96a69758985427e20c7b44136bd166f6ad366ca7046654a90e199c6ded411bf78a9d184bfd710290bba78c0f182e38c41697f820a5bc03e7632727c1bfd9f288429fe60e3f2d82a173658d3c3d7baf279d1962ee73fa7ae2f09d5217006137abc0e91ded450a50d3eadb46e9b83f819691e3a9882bd04a2c544d38a86faf23a0469ea136d4c7f171f266815a0f70bb3899031eccda84cf6847dbca955afe7fd89eeb97e9e299877571d97048a6d2c80db56df30a88980cdf02fd3e6db9d76c02476656ba66e7e80c898fd31404a4cfcb320fb066d76e6c833f412ab550f8fc5a97758b454fac0cb44587c75735314e78f634cd9073e8a1df041514b87f2bd874251bca5abf208c478f50edde4d655e7466150b587ee00f75fd8b617bc4e9430a9fef2bed7832a6407c2a17fb5fb81e313c8e7bfc58f23053bf38fb59dff6340fa13e13e152e71180bf8b3678dd32cc7057a02bf884f55fba69c32e54f7faca8118b892aeb05ae906b38c8bce89e1ef9153e49874619077831f21dacde90927801f6f75f446c15c6fb1410440ecbb207df721531b3a2505eebf1bc868c0b8145e8c7ac6094c2e61c70997658818894b08ccece42ded9f2f6dbb9010b25fc81b7ac6a09eb550d39ddf88fb7a47b6742ac69e735040fcdcd66ca2394d9062717abeb294c7cd23962a71e72686cc78ae5016fde206e27ad1fb96ed0d5a3677acebbc0d0910dcae61fb1acf31e5ecff8cfea33197a433763dcedb324e22c201f551a9c76fd0ce7f96374d28779fb09eed9732c43eb0026b92b1951f8e31c7787f27c746c849b5bb07a3b153202dd82f2e620ee9a7e3bef9304", 0x1000}], 0x6, &(0x7f0000002500)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}], 0x38, 0x24048004}, {&(0x7f0000002540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003800)=[{&(0x7f00000025c0)="bb05", 0x2}, {&(0x7f0000002600)="6d902b41adf43730ddd3f9238bcd679443c5805d47fefa177ef694a03b71152645bae65e950250bf1eaca39383e630a490279c8f1e16ead5e6028ca859b0fe22cb193d9f6ea1461553fba3518fe4ed8d333834d012dba13c1d151a241e2fe724db1cbe1caf876ff0295cbf97bf2577d606d4601193fba912a0013a974ab310e17fd9f9fc46b8f460998520b2b5e3a485b15622776c1c083b987c6b83cec19669e432ce0b98b382ea85f83ffae7857072ce6d566f8b6f81e0c1458bdae6ce6a7c667d8acf3f7a2971ab3f292ef7587c76c5fd878ebd097b778124767a44c12d4e797299b8389597156e362d7e9cb458001384b4a211dd715f89", 0xf9}, {&(0x7f0000002700)="825c7e06c15f500e920217e7c3bf8f302d1eb684acd51dff6e74f9b1339c5b4879877303c62814ff0aef0f85a1a9e29a4eccdc4eef01a2847c8e188f08a5f2bd9afc1723c13c052c219617e1cd4647f8bd20ab12320f2809527580b82b84ae46a1edd0de49bac5405257c368e97daadd0b3b9f809b339e46b060143dbe6b3a9889b60130d712fa5c924aa8141b8b5648d028aca098245560", 0x98}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="437bd27ae5e7c88ad2acb30da069678f7d0dcd4b", 0x14}], 0x5, &(0x7f0000003880)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}], 0x20, 0xcb8c16a0417d7777}, {&(0x7f00000038c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003940)="be063d84ed5721486ff59ae79177c1474256c35a588831991885ecf2bbe976aab240db13b32e307abc82953686a9c2f0fb3866bf7fdec22ee52c772f017832869e2e4bc7ea405ae777158505992fe5a5ca715de5e554e3372e2a66771bfca592ed770a75ad012d099e3faa49fc27eca96099e5c9", 0x74}, {&(0x7f00000039c0)="83e648a81db286986afc5b96a4f2ee828ff74dab82ac4ad7c98eb6a7c197ecbfea204afac75b45fa5173f8c6d1f53fd5fed650c21837400a73cf3a814ea97a6db8fe3c498fd0d745600dcb8d4c2975c13f8f641a41f4448a85682f7df9dad195af841f090107cb3dbb3f1e1862f757514b8f8faa9b0651435e3f85cf1354e2131468633ab03907f4f443cb5b0ed579e63e80f5414a7fefc34e42c6fcacba4c9ed9012eb429c9055faa8528a03aa27ba508a33f53575fe9a62bcd2e3ffe975d970c67f6c048295e95207accf8971100c20d6311b4d7243dc044c5ab83da3662c7c0975b527efe87642f52b710e0f0e14d6c3b5800", 0xf4}, {&(0x7f0000003ac0)="f37a367ec3b25da4334749fdbe02183bf06dde779b", 0x15}, {&(0x7f0000003b00)="32976a0bf607699d72cd2a904a2ab3a73caf59aa9de120b11788cb38fce958a418467d231b00db709af106ab57e395a82c1aff559c92650d2b07ae56ef7a4114fb61f7bf4570ab262d0b2800b860d35ae96a1998a8a9e330eab39e2cd7e3c866b6e42405742d00be60a79c49d043eb5cc7", 0x71}, {&(0x7f0000003b80)="266db8329bf61f63d76cf127879f9d8036e0e663fc8cf7f943a4f0acd2c9708d17c8f7dbd4d4065f4811f0351e19bfe8f73ffc76b96d4aee902fb8b048f14526c91419dcda394002f2058389684e838d3ea5ebbe655a011a3fd77ae1aed9f9b58ff50857b27f4b022f703157aa37", 0x6e}, {&(0x7f0000003c00)="e3f6bfcea68516126969227b66f1284bbb4c2cbfa5bb129276e18d1ff0cade3344abdb2ceba544371a194ba017c4e23bf7809b2311fc7657356a0e8fb4c4deaf361005", 0x43}], 0x6, 0x0, 0x0, 0x20000080}, {&(0x7f0000003d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003d80)="b2ca59a99f99b951b68ca0942009ae3597e1aa9fdcf7f744912a67bfa5aa4f56e9e0b8c41b54f4bbfa786946ed6ecf8851d72f1fcdd072fa10d49f631ac583c15a9d46dc865eadc3a56b31a0b281e65fdf86dce60f06b82cc40a5785456d1ab1ec622d8bce0b0d81613d03845923e285e5a338c8eaff0a3932f88b635187870afcd880efc2cf665d3a19bf0f1646e7979ed0b2bd3e78ade0b2a9255d291551601f2fce3aff0fe5cca5f54547afeabdd031ac666a5b0de8556954cf2550b5e50f2a1e", 0xc2}, {&(0x7f0000003e80)="aaa5f2578dd4fb1029d4799a86e78a275ca241fba6b89edc481bdc58032978b95f3440e0e8bc7f508d9832ce260f165dadbe7434a99a0a0a0ec48ca8179f7046504cf0fb3a052bc37ea91909fbc717acb7d4aabe94033bcfa97be1cd02eda0a746946a11bbbab2e959528c05428b55a53c060c43c6b1662f4512e8cecefb4a1f", 0x80}, {&(0x7f0000003f00)="ec1780f746af6eafdb5af3e36e", 0xd}, {&(0x7f0000003f40)="ca53c2211bf396e2c0d6452157bb2de537ed0b0fe519c7031c05fbd635b23cf7340069db67218a996a0aa9adf6eabe6be1ce425ba73ce34e001546a75c7b020154597d977c076d6f363b51e89d25dbaa6caaa2690119c2232a90bce603f6ebb9a0ab548d59a020dce9f0945da95884a1c2b442605508652e0070456f5a9986802c978fc60094b33cc71d14252f121b089cfdc1f7765629c9b552b8b86ec2b6e6bf2bebecf081e54269845953fa536d8c1bbac0ad7373313ff29a3fea2c937c0c96b74c98a2a50bc809d3dafb5b5793019664d93a56e8f51cf9", 0xd9}], 0x4, 0x0, 0x0, 0x40}], 0x4, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0xfff, {{0xa, 0x4e24, 0x101, @local, 0x10001}}}, 0x88) 16:53:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000140)="85b788080d96e0c59566c85215463b1e58c9d4d996f65b930d2f82830ee0d309a1f8381a746a93bfda4de6731d1e3cadb239749fbc6026ade000b8ff94e2da031a85c1f9e9f773724ff522cbbc82c2be8b951e786b7ee529ac76c0d660cbe375f331097c0029b900ba98c8d7fbe8a54c94886cca3f8994cae623a33ff116a418fa732a65f500000000b1ddad470000563cf09c36bf92050bdf68") truncate(&(0x7f0000000000)='./file0\x00', 0x4) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:34 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) 16:53:34 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x3ed9ef2025017b78, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x100000001, 0xa24383221edb6236}, 0xc) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x7a162fac71cfa772, 0x7ff}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000080)={0x401, r2}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0)=0x2, 0x4) 16:53:34 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)="9248c22d45bf83d426b0c7f74ff6a2b5028145900660124e350a095127d275f9e15d7977298c4250b1ed3664e7a967bb77bd471cc9bac4ca13beeaa6923f1b1d5b3f7f4794e943b49aecfdd6f9891f1df850030d7f15363f0ff7c3898b292a1d25ab9e", 0x63, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='md5sumvmnet1posix_acl_access[\x00', 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:34 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0xffffffff, 0x1, 0xed, 0x101, 0x9, 0x6, 0x91, 0xffff, 0x17b3], 0xa, 0x1, 0x8a0, 0x6c, 0x4, 0x5, {0x8001, 0x6d, 0x4, 0x8, 0x6, 0x708, 0x4, 0x97, 0x3, 0x10001, 0x7fffffff, 0x0, 0x3f, 0xffffffffffffff81, "25e0d88f99b4ca865d87f060ab90e6057c3678cd826d1e45c40f46b32973da1b"}}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:34 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000047f99008fa74e02b68271c44e1f220a9e88cd68c2a1388e829f7f8636084fe07ee84b2a76078946f9df0df92906ceaff9e7cdd3fcb769a6b68da7aaf72fb00b1d68aeb8117aca51950b0cc174f3702a70523136b0fc2205769c5b2078aa6ce34820be76d1e5bf77780d8fdad8991523af4528233b35791c1d3c898dc0d414009e20e600"/165], 0xa5) r1 = getpgrp(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r3 = getegid() r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uinput\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="cfcb2b13774c28bd8341c24b1a178324ad7b56628c5e62797879865f78532b5c03cfebe2d9b66a8faeb20d2f073093cd3cf88a3b08832d980de4846b8a234b3519c88783cca4083a5a1c51b16c2930b2f174b3e6c463168d147206358c6946780dac3b7aa0d7da78603eb428ee8d247e0485c2f0bb61a3dbd155d84630c737ba6d104cecc445b9db8c64d9a1dccb3222902b6d4f4ff53ca807dd52696191a3fc9e82c3a38814d9a4454a663320acdb38ea72ed013e14aab726948f25edecf2", 0xbf}], 0x1, &(0x7f0000000540)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r4, r0, r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r5, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x188, 0x4040000}, 0x40000) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:34 executing program 0: r0 = getpid() write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, 0x4, {{0x1ff, 0x8, 0x0, r0}}}, 0x28) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000080), &(0x7f0000000140)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:34 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) 16:53:34 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000001c0)={r1, &(0x7f0000000100)=""/172}) pipe(&(0x7f0000000200)) 16:53:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:35 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:35 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth1_to_bond\x00', 0x1}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:35 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000bc0)=0x6, 0x4) lchown(&(0x7f0000000c00)='./file0\x00', r1, r3) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x6, &(0x7f0000000680)=[{&(0x7f00000000c0)="b26171ad0d086cae2e7ab870a9f5511f929302510a97af34e5d15bde47501e6657ea32706e83a4a6f88018ebfacb95594cbcf85cf34bb21b98a07989440dba9eb7c6fc7f2d57167acf7d9b0be44275e6eeeb8cb15b619a500a5424f0f2c2b30e81c10b8f20cf1e6b2f475cc4a5a3f785cbd3a0accbe361782a694ccd3ceb87aa27db6f0b53a7fcf7bc3ba098b531f369467e8b", 0x93, 0x800}, {&(0x7f0000000280)="f30e352c726ca56b1120fc656186fe3d40a2da2dea2f88be9df70220387cb9f17f511ec2182e2cf066b90a234357222ba7ceeb6abd3c55d91ea2c1c03065f5b791a435ee4323e842e6b6dc7c46f2629b74384f8dde606bfec4a59c3d401a674c949621563a0b07acd6f963fddd54d2a8dd71b9a00b12a025d5fc96912d32ff7b616457f4fa63e8da983b5ee6ef53e1a7ca0b96d842e44e0c124a4ed7c989ac863a4ac1d201539a4bc654dc561737233c2dcd219342fc1163b34d03f1b3baf0880c2356209d157f1bd6494d8d9fee716e40a920b673e60b0f9a47dd7fded5c6", 0xdf, 0x1}, {&(0x7f0000000180)="ca34f540c5744a09b629d7cf85e4f8eff74b577ce06f8606aaef9d70b08bc4c129f0201edf1d1c9f2997261d48d6798bbb8fc905d736314b5309549a0cf55cb2f171ee6f0c49bdc091823df400dc15e7f8462b89", 0x54, 0xff}, {&(0x7f0000000380)="2cc75d6254def2d9a00539c8f3c2ee6637798fc18361a05893af591f8d297865fbd4dab148e961ba6b7bdb372d0cf535d709a4124863cee0b6501d19c8dddc9f4842d8023ab5035fbf8d59899c2c220f6df7b8de1493c94c378003444e524faf9c27eef6877f1ed877ca62377e437bf7b866a8f507457db8247d859af41ef260d4f4b4aa1e6b1ffb326c6b2a997e5d42e8b3a0668ab3857d335efacdb8be5e0f77a0a55679923feed500f7c0c1d7ad0d8c2625b1bd80a85c5d15c492fb36916e3daaf4", 0xc3}, {&(0x7f0000000480)="21118f3212569e7650728551bb6fea71418f1b59da2bc998851bdc5ee770077d8d0ff9ad4b20d7c8fc5ebd544fe836b2098ece6ec49f27b784f34bed28811c80c655dbd1904b0aab520635a04346a94f8519bb02f71bd9a31efad3a45d05ba19ae96602f04a54f2a5c984f40ec82f3e835ccb77f2ab74e06369478016ef2240e7248c096c8465c8597b120dc76c38f2582111a4162115290e0fbc4ca7045932ae29fb887a1dd8efc93edba2d1c5b199232afcc1464d132c36e54cb01a97b9579502d7866d8926ce794da801b02b028656ce78cfed5513d4c9b7afec5116b6d8640a298c45437515cefb268c3", 0xec, 0x6}, {&(0x7f0000000580)="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", 0xfb, 0x1000}], 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030352c636f6465706167653d6370313235302c747970653db7d5c9b62c756d61736b3d30303030303030303030303030303030303030343231332c7569643d", @ANYRESHEX=r1, @ANYBLOB=',gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=r4, @ANYBLOB=',obj_role=()!)vboxnet0vsecurityself\\,selinuxsystemmd5sumem1wlan0-vboxnet0vmnet0cgroupppp1,dont_measure,obj_type=/dev/mixer\x00,hash,obj_user=/dev/mixer\x00,context=unconfined_u,appraise_type=imasig,uid>', @ANYRESDEC=r5, @ANYBLOB="2c646566636f6e746578743d737973616f01798d2c00"]) [ 643.333236] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 643.341228] FAT-fs (loop3): Filesystem has been set read-only 16:53:35 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 16:53:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:35 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'io'}, {0x2b, 'memory'}, {0x2d, 'rdma'}]}, 0x12) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/194) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x4, {0x7ff, 0x1, 0x3ef62393, 0x8001}}) [ 643.758115] attempt to access beyond end of device [ 643.773286] loop4: rw=0, want=17457, limit=112 [ 643.785489] attempt to access beyond end of device [ 643.797072] loop4: rw=0, want=17433, limit=112 [ 643.809731] audit: type=1800 audit(1566320015.511:182): pid=26380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.4" name="bus" dev="loop4" ino=685 res=0 [ 644.053427] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 644.062904] FAT-fs (loop3): Filesystem has been set read-only 16:53:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80800) fcntl$lock(r2, 0x27, &(0x7f0000000180)={0x2, 0x1, 0x6, 0x7, r1}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x436bfa94c269f445, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000200)={{0x0, 0x3, 0x7, 0x18000000000000}, 'syz0\x00', 0x12}) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x20000) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000280)=0x39) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000080)={0xa00000000000000, 0x100000, 0x200, 0x4, 0x13}) ptrace$cont(0x9, r1, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x20000) 16:53:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x408000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x7, &(0x7f0000001480)=[{&(0x7f00000000c0)="2cc11bbf6a10e5a8461a1868e961d2526c713897d488cc8629332bd144b453a758f1aaa4c40baf365e4812975f565e3d1353ec673e542fb3d63b9bd9c2517ca8e71978e3be6e22751338808ba26095295a6592fc2f76a3e7720c34bca8df6a2182c29ab9e69d579ffd844ea2e4895b6fa5dac7d83fe2dc88bb68f8df8eeac3cb2d5eec46ce428f2c501adaa4e7a250e1f5", 0x91, 0xffffffffffffffe0}, {&(0x7f0000000180)="0fd2d4376812f1104a42248e4e549f820393bd3fd9b50333766a9bce04", 0x1d, 0x400}, {&(0x7f00000001c0)="8961220dea0cc33cacbf3c128de531fc9a171ad9fc7ecfe86f8732192c4010d184411728e7", 0x25, 0x81}, {&(0x7f0000000280)="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", 0x1000, 0x80000001}, {&(0x7f0000001280)="f2c39fc0e369475378baa6572673673002300dd11c5f93bb637e593be13a17cebe7334527ec367ca2fbbbcf05d50839c3634f959c23608b5092b3f0d1dd960a8d4f8e0d25e69185351407d657bec94a7309f1c64ba080d97a63e70df531f65a7b7d5250d5fb307", 0x67, 0x5}, {&(0x7f0000001300)="fdb8557af5172ea82c40218dd9cd7d753e27a1fe04aa4147fdefbd1b1f9003b1243d0e51246b684061d60b71b1c39a12e91f8a5a136c84890207e014c4e8ed0f15ce1a11ce2e77acb8cfeba70b7bdbb6309eb29073c0b46c99b80105719304e3c41b8579c2818c0dffe7347b519586bd45d2090634721008b83137f7b2a4df4a5184e74c47faa0fb6be670468cfd3c6378b860b9dbc074625a28b8065274ffc44caa982909d1786b5c1937b71b66df1b85dd16aa623474ad5b2aa5776c2e1577288be7beee1b7d2352668327aebad48a2c70a6d2d581a847f7", 0xd9, 0x6}, {&(0x7f0000001400)="ae5ac2d6f7867a728fe7ad1db5a98ea53364a4faae9fb54ba2eba0c3297dae26d736afa12d52ab03056e64c83d53e75be0345e8bda2eb2d130d7c6e7b281f72f9b3d79851d160040cc23afa85c", 0x4d, 0xab7}], 0x1820808, &(0x7f0000001540)={[{@discard_size={'discard', 0x3d, 0x1}}, {@grpquota='grpquota'}], [{@obj_user={'obj_user', 0x3d, '/dev/mixer\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000200)) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000015c0)={{0xfff, 0xfffffffffffffff8, 0x16, 0x1}, 'syz1\x00', 0x22}) 16:53:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:37 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(0x0) r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xc0100, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x1, 0x3, 0x4, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x9}, [@typed={0x8, 0x63, @u32}, @generic="7a111abc5cd5f1cb0c6e7b553faf6f7b6b236e2492d78442fe6ff4153dc2ccade776dd845cd019a9a3daf89f3938a39df7152ce340994e4fa42d83ddcbd909f74085601f50b54f6fa0a53f083551ca45f498379b1441e77d8186a82a71e1de8084cfbedd09c11cea67add3790cb9af1583f0a3d5291c524311ab06"]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x1, 0x800, 0x0, 0x0, 0xfffffffffffffed0, 0x0, 0xfffffffffffffcf9, 0x0}) 16:53:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) write$smack_current(r0, &(0x7f0000000040)='/dev/mixer\x00', 0xb) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4200, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000001, 0x22602) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000040)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:37 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001b40)=0x0) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001c00)=0x0) fstat(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001dc0)={0x0, r0, 0x0, 0xc, &(0x7f0000001d80)='{\'vboxnet0&\x00'}, 0x30) fstat(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() stat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002140)=0x0) getresuid(&(0x7f0000002180)=0x0, &(0x7f00000021c0), &(0x7f0000002200)) r14 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002240)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002280)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000002380)=0xe8) r17 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000023c0)=0x0) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000025c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000002580)='\x00'}, 0x30) r22 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0, 0x0}, &(0x7f0000002640)=0xc) r24 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002680)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000002780)=0xe8) r26 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000027c0)=0x0) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = getpid() stat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) r32 = getegid() fcntl$getownex(r0, 0x10, &(0x7f00000030c0)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003100)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000003200)=0xe8) fstat(r0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000032c0)=0x0) stat(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000004740)=0x0) r39 = getuid() lstat(&(0x7f0000004780)='\x00', &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000004840)=0x0) getresuid(&(0x7f0000004880)=0x0, &(0x7f00000048c0), &(0x7f0000004900)) lstat(&(0x7f0000004940)='./file0\x00', &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r44 = getpgrp(0x0) r45 = getuid() r46 = getegid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000004dc0)=0x0) lstat(&(0x7f0000004e00)='./file0\x00', &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0}) r49 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000004ec0)=0x0) getresuid(&(0x7f0000004f00)=0x0, &(0x7f0000004f40), &(0x7f0000004f80)) getgroups(0x5, &(0x7f0000004fc0)=[0xffffffffffffffff, 0x0, 0xee00, 0x0, 0xee01]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000005000)=0x0) r54 = geteuid() r55 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005040)=0x0) fstat(r0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0}) r58 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005100)={0x0}, &(0x7f0000005140)=0xc) lstat(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005240)='./file0\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000005a80)=0x0) r63 = geteuid() getgroups(0x1, &(0x7f0000005ac0)=[0x0]) r65 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000005b40)='/dev/rfkill\x00', 0x4100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000005dc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005e00)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000005f00)=0xe8) getgroups(0x8, &(0x7f0000005f40)=[0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01, 0x0, 0xee01, 0xee00]) fcntl$getownex(r0, 0x10, &(0x7f0000005f80)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005fc0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000060c0)=0xe8) r71 = getegid() sendmmsg$unix(r0, &(0x7f0000006180)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001880)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000000c0)="93ab192e1bb376f1799f045effe0de5eb0b9fbedf86645121556799bb98c9ea65a44bc3ba01a", 0x26}, {&(0x7f0000000100)="391ec9e4c94fd33efcb0787d48fd830098c0e76517f644409fc1cde745968cf631822c41592f4887c355474f0bace57ff8e858a640ff1a29cbad9a739bf4db12e766095729bf271a9872d8606c32fcfd55481f69e0179965027a676fcc552ff4e835cdac00b75ecc69e1ab660500cf897a763db1701b056362941eb72e9609a1e3e86640740f", 0x86}, {&(0x7f00000001c0)="d32135aadd202a20c20f691e26513dd283a31a1b70936c10b5628e061ed5a9c2af916fbb6d30fe77c694cc4fa43996d615af68807d5ded628a54fce9c904ca50a0fce81ea96654d497e889a94a6dbbf1f7c073428ec37a", 0x57}, {&(0x7f00000016c0)="dce2f70da0a908ab5748da9d35730cf514d53444392f0444ff00e2b1fc9b26d72f5ed94a12ec86a5218303e2a0e24f554f03d764d098016d332c25dceb30d77e66fe2b1480d833a95eba0ce777b0826bcebdc3527913a2c6e0c1c2fd1474081277eec151170cc45f42317d8cf01d49a7e502436079a413b239ee6b22543ce82cc7d825f6c04a57bacb9a4a0e20171fd601876d08b0f1f59809d0343ddd11741d925366bec9d4bc716ded9d634c1c2ede47af84", 0xb3}, {&(0x7f0000001780)="f71b4bc1212e97a261226e8433ae5bc871f9643610f609473f57a7c0ab7f7b86fa2719927b59bf5608f84841e654980ff3da5542c6f259048855474ec1f2c9f8c880496cf6fd78fcbe1be11c05540b118f989fb7e07ba415b0b0ffcb5e99a2efef905b4688cdd8fe29fa8ae8fe52cc38e7375d7b04315f73fa86ad162e9dd55f90bab80e1b794414959e0599b8e423ff1e2b5aec3c64dec169ff479c25bfc099064e5cd4ac85877c0e814bad1c730b75009b2c26d3d8538e10c19f15951b96d4486479537704c60ee62e7134d5815d291c91fa36716bbb15244e44bd1d669681173f006227413fa243612f30cff4cb053844a4b5b5b435", 0xf7}, {&(0x7f0000000240)="5d926e908a776f2f0c61c9b04ab326850706d79ed5f0d057887dbd", 0x1b}], 0x7}, {&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001980)="eb575f1f78e85c31602c1a6105d43694ba696346", 0x14}, {&(0x7f00000019c0)="2eab09eb4b67d6416bc9c957f258499d19fd2a268c201e3a0c283a076d43268fb5a9b3104b4d8c5a773fb61d", 0x2c}, {&(0x7f0000001a00)="52815f4bc87687459f93f54a2e229528e1e74fb8dbd9f294eac7f670771af9ed765b78d962756f4edbfd1f484f0773d61ac0916ee9afb666517445e13ea9c569c8455d973772e2f8937123567ff255a210b9009b0ed7d0737a6540", 0x5b}, {&(0x7f0000001a80)="a7071c7969e77c3518e6156436324898a51a5e9750bd20125c9c92948a4c70d29d3eca2a76fa0c499ef2c10d121ff28348076dcb180567b3ca293ed8e0091ee3859d4ed6b1608aeeb9cd945a0b884b675043e9a30945f3a0125b6d0c89a4287d", 0x60}], 0x4, &(0x7f0000001f40)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x130}, {&(0x7f0000002080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002100), 0x0, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}], 0xf8, 0x40}, {&(0x7f0000002a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002ac0)="7d27773531e7a991cba23a0f6670949cf0ae4356b991b248339e36b8a4691aa74ae97317d82a2eeafaa075d800f15492d4210b64718a714803ac6211b194ed7244542a9afcb9d75e04d765caf8dbecb0ea43924a741ad037995b7da2b0bebc898b648b249ad9b19109a07709a40716a9b281be7a20f156464196d34f9bcc39f074ca2beaf414d903e72312af38bd5313fbedbc0a07c1195ecdde8b72439da74145c937727f37ca8ac2a0a1ba2701a3b13fcbde616ecf9c01fcfb5d3f0434ea1b242da6b6127320a12f530529dd35838fc646110eee887ea9eb702f37f3609ccce6e4a8bf28cee6ee44646ffae7080c92", 0xf0}, {&(0x7f0000002bc0)="9916d0628e99af856e616c77766aa894145f55faa8daf33b71716d2196b3fd84f2e29f9d729c632c54ef2b77e931bc6062561b2fcfd78a17d1aa6b8c508598814f4e09aee88f175db26a7fbf878af06119a9a3f3553ab9a207f681f3dadd524b09d64a5eebe3698ac6144740417c0145065cb4f21cedf2b31d46d0c3076aadf38730efab701e93e88d8445474eed2083d2d16f078c4cda6d05c79dc3b31df07e95badf4196a91fae04ec32414531007f98317af1ab9612f812bcea30785b460c", 0xc0}, {&(0x7f0000002c80)="9d5948cba999f90040aa0a79ca56570d09165be1aead44dcc39fe2d8f072f66f40e51c8ecea26a9494deb745016256af169309e7b8c09596b2a4f54644ed056a8919c4e68609eace1e999863a37152922f0f1627522f6ac3c311c21532bccdaf41640afa8a7d54eed8fa9b3847e4f3aca70411d9dc7b2935f45d7cda7269e175f6b5499740bd86fd3782bcf8a1828fcd83e9d062df23da486563faecd66980e02da6d7456bc3d36871710154877df07fdb298e1d78f137a9e431ef", 0xbb}, {&(0x7f0000002d40)="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", 0xfe}, {&(0x7f0000002e40)="8ef1788dba72681cae9215ed4f21ae1ac7ded5b0d2f555c313b1fea573", 0x1d}, {&(0x7f0000002e80)="5f4769bd6e46d6683f60620cd1122e975098f2c3dbb6e1a08d8eed59535161c5ad7e20aff8d5feee201a5f2ececba7a8a51e9f7dba31fb799481de69d16e9b9615546b3ae24d5994e85e9814af9bc55b4f3ba0251a35f7e73d31ea28e9a47dc4c8661c46b7322b39a102d9904a0b8183151ba5f669a716e68eb5333e7bbdea7fc22a3d1764ff9aae4b3989d82fcd1c1e4b05f00eb922ac3228f5c1c02fdbc2b36fd36dff86b28ffc48b535e4430f9de683055f792e00a6668e6af72086129f06c1e028219fc37cf6e42c287c65eee54b83027144ea", 0xd5}], 0x6, &(0x7f00000033c0)=[@cred={{0x1c, 0x1, 0x2, {r30, r31, r32}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r33, r34, r35}}}, @cred={{0x1c, 0x1, 0x2, {r36, 0xee00, r37}}}], 0xa8, 0x10}, {&(0x7f0000003480)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003500)="65ffa6cbcd336c03cf9099a3f8081359734f1139cfacf7453931b364f310020ed42b305e12041cce8b9ddc3ebe8335a022b8aa12788f5a4a931ba92227cecb6a24fcebb2a0aa583e6553cc1a15ca7296b2203e039c2aff605fcf831562932797dc9c3e8d124ca3d880a8344d330df56777f4d32a5ee33e85d924d94a3770fb0d9a8dc24dce0a7542919f417630d4dfaf0de5ac40e990e13ba2e9b0817abd367197a4278c44e24aa93146a5ecd6ad6b56084262391162a0eb4d348a", 0xbb}, {&(0x7f00000035c0)="874c96e1fd195510e31457ea89ff48b03c76e16c9cdd2173dc9daeea5118fa0d98cc9082ef0dd07f48376e16894aeed0d21964c7b19006bb3ae83f593f34e72c947b7cabb97fd6cb0df047e5e943737f42da79d3457d330c94cf10a0a3c73b48a0051d4f06f3d95c3ae59f8d83152aa18f23becd002f4c331f7cfc596983e663a1d51dddeaa68c0d1038b4648a45b83c2336a4064a45478809f05214ef9275650612bccc5536eada5ce988487401d92bf943dd94cf6ac6b44f7d68cbb4b6d148289a5de19be911ec98", 0xc9}, {&(0x7f00000036c0)="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", 0x1000}, {&(0x7f00000046c0)="c2955cdebdbe54d3ff57ddcfdd66f5512b6f4134de1981ddfc88759877cde885e8606e8454f2a76a5b2dfdd0229cc5c8ede4db3200377f0affe51c5e3e", 0x3d}], 0x4, &(0x7f0000004a00)=[@cred={{0x1c, 0x1, 0x2, {r38, r39, r40}}}, @cred={{0x1c, 0x1, 0x2, {r41, r42, r43}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r44, r45, r46}}}], 0x90}, {&(0x7f0000004ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004b40)="2b0257ad7b232d9a276bb0e4c65358a6f21524ad9bceeffcfa6a70fa914840c96613e5806b8cb78799a6df3d5ef0c36acca79e76710bb125cf2a3c600f4c2609ffbcfd2f96a755818c402eb67dc0a30f2691a8dac2decd702eab7ace05b18c0ff7fb01434872d91b94ce73fec10cee3926506450936ed5105f1219f72d0e2cfd97feced4caa5821017fb4758aa24070f93", 0x91}, {&(0x7f0000004c00)="1f1dcdda42329786396ee7394a6ff30ba9f68364f9cd50ed0e8521ac0e50f871c927e63cf5da64072f5ab8e875aa38ae68deb04f1ecb90ab678827024dc27538bcc8b4ecdf", 0x45}, {&(0x7f0000004c80)="047557cfbe7fa13d167909c6cca02e75f3a9ff294cad1cb6c04a4550358642c4d579b638ac518a66566924dd766fd12024e2192effd5b5fcef4b01e11741fc3fca70d392e13fef10314b78125d99ff5b70b1f4f93e298c0899e91037ee570020cd11cfe9104bcead4e4835f23d9f90d7fb6384b0ed66d2fbcaabc7e37a1fc71c2164043fd4f15316184ebf8abbd36bc3b63ca9", 0x93}, {&(0x7f0000004d40)="ceb6c5fee2c680cc9dd4626888e9b0250e6bb90fded3d32abd74b9acca84b4acc2dfbd0ca51582bf117ce266828d86ed46aec6ab", 0x34}], 0x4, &(0x7f0000005300)=[@cred={{0x1c, 0x1, 0x2, {r47, r48, r49}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r50, r51, r52}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r53, r54, r55}}}, @cred={{0x1c, 0x1, 0x2, {r56, r57, r58}}}, @cred={{0x1c, 0x1, 0x2, {r59, r60, r61}}}, @rights={{0x10}}], 0x108, 0x20008800}, {&(0x7f0000005440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005680)=[{&(0x7f00000054c0)="69c1d8f4b0b345134e1ef845ee4f2b038d707a0bf655f89eeee4074abaf52bcefd0bf705101779b43a437d857b6d6009fcc426d355914e9c80776a35aefe0f8bcdc0dfb5ca40b2dc5986128e3255b1758f3d8576a91e2ec7088d941b8f7303553f9d2f0c8df1aad260a4a759e73096b6e430db9e8842eec5d9b77248c82c3405895030b4674f2e175d6219da6430ea6a1d1f0fa419d85730a75bf37ae618849d32b27b24dc24020be8c40232058800036c258f4af5a5c0f5214f911328d83e4f06c6d4e98ec7a986e27cd2b37955", 0xce}, {&(0x7f00000055c0)="f3a0210c294694f1dee657162b924f5fb62e9b5fafe44c73551a83610a26e9e58c8f4ed0d42a06c8e6ccfe4d5605981c412817b5509840d8c76b7bc07fa124f24bda07f4856841039920d95d2f4b6acdfd430cec364408d03a5c1aa753f5873fae00f14339a4824e2353b574d36d80d70e930fe3a05ffceac9ad5d734e8fe686314590a33012ada7044ef609511ccd96f342c54a9b7145e0574c1ed662dfc70c7b4732a1c1c060975e866ddab3ce6a194cb8c5", 0xb3}], 0x2, 0x0, 0x0, 0x20000000}, {&(0x7f00000056c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005a00)=[{&(0x7f0000005740)="120dd46a082e5c2342674c84a29c2b071e05f6", 0x13}, {&(0x7f0000005780)="036e53703f2f4970cd6b3c33d926176555bdaa24f0d28780d46bea0a9259b7ab2e37348053bd962549d15a671cabc907568bc94d64487a9945f6b084ba9282cd442d24d6e34948e3a960eeb3cb4160d5327769c6568373e416542b53b19f19cbd9952c72b51c5a44888dc936633b22f53d71ca0b9d110941d850bb7e736dd0d332188a8b42999e734ffb9320198dcfc7121b45d8176432270093423f0afc3b2278491a35f2b616911dbd23bd438813bd2d761cf8a85f26f544e944", 0xbb}, {&(0x7f0000005840)="493c453455aa3d11fe391b43396029e8a106140230ddd20480584a1b76faa315e402db3bbcca2e3f200d579d4ad1d2e91e45452a7db76a9fece5f51bf06b94e7f83a840e99d1a5d2fa4bba5acf27928a6e4b2f06c4920e6e3cd662783d9cd78080fe96eb748e54cc7010c2c330c4c205a27fd8633cbed08372fd7577e8b7ca35852e3841f5e66c73ec93719c2758e0ad0d69e6c8cb56895e6e2407ac6cd678", 0x9f}, {&(0x7f0000005900)="5d337bd6ebe5cd6889d6494da242b242a317e433388905e90b3213acb236ef9b4a8fcd7dff3d32166b1ee4ac5d5ac5e7ffc468e9417135fd2234470776341031d238042a64a7b202fb2a990b26d7fb88787ee236761bcdcbe2b5fefb84ae04d33cce9a0f4383", 0x66}, {&(0x7f0000005980)="ad2b47faec79a66c919f23a7811deb6f5f4c0a9a8602495a0a8a708cd3f5c491ee9ec41df7ca58d648bc93d8c14e03aeb699359b7f469193d41103e9b0308f1608c8976fe2de028ca1dc30c4e79845e62c9faf7edfa944ad0fcdd00e55a1de9822d8d5fb5eee5bb264558ddb0d91bfbe131dafad584bbd71c20dfc", 0x7b}], 0x5, &(0x7f0000006400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r62, @ANYRES32=r63, @ANYRES32=r64, @ANYBLOB="00000000300000000000000001000000010000003521bfcdf98bc2827941a2bf103dc92a2222a4a26381b15f8bb5d604f39b5eae9013", @ANYRES32=r0, @ANYRES32=r65, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=0x0], 0x85, 0x80}, {&(0x7f0000005bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000005c40)="577c3d452714dc32c679d7770d1ca39f3fdf270915249a4c338a54de5d10e71248d60943a93cff5badd78cc956277e", 0x2f}, {&(0x7f0000005c80)="a2d41da5f09753d15f5658aceb6137a6a3414506da37204dc53e6a362b9fb5cabfacbff61ce1bc46f46ce6038065976a4e15659fe2a1d4befaf557d42ea8c059", 0x40}, {&(0x7f0000005cc0)="f07eae49ef536cc1d174dcbeae3c7307b0ccba620fa674795a699437b81f2436e14b1941c320b388208cc99820e6be47deeca0d48faeebf90e1d7ceadf60c9966f2f84ccfb1be85c08e5ef98cb9d90e8ef7a789be0d12ef601f21aa51a0ce8f1ea4b4e14655aca726ab735a818e799179bcc4679c2a932b3cde1b7c57d8ec9b69797ac37198328650439a3e148dac644b69768bb62cc24c6a41d6365ddaa76871d", 0xa1}], 0x3, &(0x7f0000006100)=[@cred={{0x1c, 0x1, 0x2, {r66, r67, r68}}}, @cred={{0x1c, 0x1, 0x2, {r69, r70, r71}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x58, 0x41}], 0x9, 0xc000) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x1f62, 0x8, 0x3, 0x0, 0x6, 0x7fff, 0x10f, 0x40, 0x2cd, 0x1, 0x0, 0x38, 0x1, 0x9, 0xfffffffffffff001, 0xfa}, [{0x5, 0x1852b5b4, 0x3ff, 0xfc, 0xfffffffffffff0e6, 0x2, 0x100000001, 0x100000000}], "8bb2a3b73375694581acaadbe0fb7cdd355f3654b41eef77f3dd72a4a29c554042c8d847a3985e81b0f2393d8fc32696bf94fda2a613e9bcd0c71d279aa22390e84faa6af93b3acf1a74cb7388c270926a128aae0efd81fdb5f4efa662729718c317d817ff28fc930750afaeeae13f899d487279629676b3a3593c6af6cad90e91ab19834859ebf9c5a6cceb59b5b749f6b8ea0eb9", [[], [], []]}, 0x40d) 16:53:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x20004, 0x0) mlockall(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x2, 0xaecd}) r2 = msgget$private(0x0, 0x1) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000180)=""/103) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0x10001, r1, 0x10000, 0x49}) 16:53:37 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) fadvise64(r2, 0x0, 0x6, 0x1) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000140)=""/221, &(0x7f0000000040)=0xdd) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:38 executing program 5: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x20080) accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80, 0xdcfae553337d6fdb) fcntl$dupfd(r0, 0x406, r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x110002) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x1, 0x0) 16:53:38 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(0x0) r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x408040, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x5, 0x9}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)=0x1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 646.564636] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 646.577351] FAT-fs (loop3): Filesystem has been set read-only 16:53:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000080)={0x0, 0x38e, 0x0, 0xfffffffffffffea9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0x100000, 0x5000, 0xfffffffffffeffff, 0xf904, 0x9}) 16:53:38 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) 16:53:38 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(0x0) r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) alarm(0x4) 16:53:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10b, 0x2, 0xffffffffffffffff, 0x1ab, 0x1c9, 0x10000, 0x16f, 0x6}, "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", [[], []]}, 0x1220) 16:53:38 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0x6, 0x7f, 0x3, 0x1800000000000, [], [], [], 0xfff, 0x1, 0xa70, 0x400, "7a3efc1e833ac9f8d0a876d1229bb01b"}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x3, 0xa2, 0x9, 0x3, 0x5, 0x100000001, 0x5, 0x7c, 0x8000, 0x20}, 0xb) 16:53:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) modify_ldt$write(0x1, &(0x7f00000000c0)={0x1ff, 0x20101800, 0x4000, 0x3ff, 0x80000001, 0x7, 0x101, 0x81, 0x7ff, 0x401}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000100)=""/59) ioctl$DRM_IOCTL_VERSION(r2, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$nfc_llcp(r2, 0x0, &(0x7f0000000140), 0x800) 16:53:38 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @local}}, 0x0, 0x65, 0x80000000, 0x7, 0xa0}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) setpriority(0x1, r3, 0xffff) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local, 0x6}, {0xa, 0x4e21, 0xffffffffffff8001, @empty, 0x1ff}, 0x2, [0xca0, 0x9, 0x1, 0x8cf, 0x4, 0x8001, 0xffffffffffffffff]}, 0x5c) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000a00)=""/4096) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x4) setxattr$security_capability(0x0, 0x0, &(0x7f0000000500)=@v2={0x2000000, [{0xbb93, 0xffff}, {0x7, 0xfffffffeffffffff}]}, 0xff5a, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000100)=[&(0x7f0000000700)='\x10\x00\x00\x00\x00', &(0x7f0000000640)='!\x00']) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x1d3, 0x0}, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 647.452899] attempt to access beyond end of device [ 647.458109] loop2: rw=0, want=20593, limit=112 [ 647.473363] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 647.487252] attempt to access beyond end of device [ 647.495015] FAT-fs (loop3): Filesystem has been set read-only [ 647.507481] loop2: rw=0, want=20569, limit=112 [ 647.515420] audit: type=1800 audit(1566320019.221:183): pid=26540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=697 res=0 16:53:41 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) wait4(r1, &(0x7f0000000040), 0x40000008, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ptrace$setregs(0xf, r1, 0x4, &(0x7f0000000040)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ptrace$cont(0x9, r1, 0x8, 0x8) 16:53:41 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 16:53:41 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:41 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, 0x17b, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, @aes128, 0x1, "d20c7cf866181be9"}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2371f05f}}}, 0x90) 16:53:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:41 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2001, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) 16:53:41 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4002, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffffffffff1f, 0x0, 0x0, 0x0, 0xfffffffffffffd52, 0x0}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x1], 0x2) 16:53:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:41 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000cc0)={0xffffffffffffffff, {{0x2, 0x4e24, @local}}}, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000a80)=0xe8) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() r14 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000c00)={{}, {0x1, 0x1}, [{0x2, 0x1, r2}, {0x2, 0x5, r3}, {0x2, 0x4, r4}, {0x2, 0x5, r5}, {0x2, 0x4, r6}, {0x2, 0x1, r7}, {0x2, 0x4, r8}, {0x2, 0x0, r9}, {0x2, 0x3, r10}, {0x2, 0x1, r11}], {0x4, 0x4}, [{0x8, 0x1, r12}, {0x8, 0x5, r13}, {0x8, 0x440d6d80ac843bad, r14}, {0x8, 0x3, r15}], {0x10, 0x4}, {0x20, 0x1}}, 0x94, 0x3) 16:53:41 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x18c, 0x0, 0x9e, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001440)={'irlan0\x00', 0x0}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000000c0)={0x2, 0x8af, 0x4005, 0x4, 0x9, 0x53}) recvfrom$packet(r0, &(0x7f0000000040)=""/92, 0x5c, 0x40, &(0x7f0000001480)={0x11, 0x5, r1, 0x1, 0x3ff, 0x6, @broadcast}, 0x14) 16:53:41 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80406, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 650.314229] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 650.322139] FAT-fs (loop3): Filesystem has been set read-only 16:53:44 executing program 0: getpid() clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) tkill(r0, 0x10) sysfs$3(0x3) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x8000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={[], 0x800000000007, 0x0, 0x101, 0x1, 0x35}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 16:53:44 executing program 1: setrlimit(0x7, &(0x7f0000000400)={0xffffffffffff5dff, 0x4}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@getsadinfo={0xc8, 0x23, 0x20, 0x70bd2c, 0x25dfdbfc, 0x0, [@extra_flags={0x8, 0x18, 0x200}, @policy={0xac, 0x7, {{@in=@broadcast, @in6=@loopback, 0x4e22, 0x3, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x0, 0x0, r1}, {0x0, 0x4, 0x100000001, 0x9, 0x0, 0x40, 0x3}, {0xfff, 0x80000001, 0xffffffffffff1c1c, 0x8000}, 0x1, 0x6e6bb0, 0x0, 0x0, 0x2}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:44 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:44 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:44 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x280, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1, 0x9000}, 0x4) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:44 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 652.872168] ptrace attach of "/root/syz-executor.0"[26628] was attempted by "/root/syz-executor.0"[26632] 16:53:44 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x100100100) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(0x0, 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:44 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20800, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}, 0x48) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:44 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x100000001}, &(0x7f0000000080)=0x8) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000100)=""/243, 0xf3, 0xffff, &(0x7f0000000280)={r2, r3+10000000}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1}, 0x8) [ 652.996223] attempt to access beyond end of device 16:53:44 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10001, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x81, 0x4, 0x6, 0x81, r1}) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:44 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0xd28, 0x4, 0x0, 0x56, &(0x7f0000000040)=""/86, 0xfe, &(0x7f00000000c0)=""/254, 0x23, &(0x7f00000001c0)=""/35}) [ 653.037362] loop2: rw=0, want=7729, limit=112 [ 653.049804] attempt to access beyond end of device [ 653.073990] loop2: rw=0, want=7705, limit=112 [ 653.097113] audit: type=1800 audit(1566320024.801:184): pid=26642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=705 res=0 16:53:44 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x6, 0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x2f, 0x1, @thr={&(0x7f0000000040)="ffdcb97eabc45c7ca4f796564bc388", &(0x7f0000000080)="3a99b7789c7c87a74b3e90851ed891161a207ffadd53b29c899c57e4b71d79314f7c2f7e2d1b723aa2a78f825be9c54e16b2bd80c7aa18b4a173d22491fe99c4060aeaa02f79ba855ca502d1"}}, &(0x7f0000000140)) msgget$private(0x0, 0x18) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCMGET(r0, 0x5415, 0xffffffffffffffff) accept4$nfc_llcp(r0, &(0x7f0000000280), &(0x7f0000000200)=0x60, 0x80000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180)={0x1, 0x1}, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 16:53:44 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000040)={'lo\x00', @ifru_flags=0x200}) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000005c0)={@empty, 0x0}, &(0x7f0000000600)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'yam0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000780)=0xe8) getsockname$packet(r0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0), 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000940)=0xe8) getsockname$packet(r0, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) getpeername$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d40)=0x14) r10 = accept(r0, &(0x7f0000000d80)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000e00)=0x80) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000e40)={@empty, @empty, 0x0}, &(0x7f0000000e80)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000180)={r13, 0x5, 0x8, [0x280000000000, 0x7, 0x589, 0x9, 0x2, 0x1, 0x3, 0xbb]}, 0x18) accept4$packet(r0, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14, 0x80800) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f00000026c0)={&(0x7f00000021c0)={0x4f8, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1f4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x260, 0x2, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x10001, 0x0, 0x1, 0x5}, {0x7, 0x0, 0x51e, 0xdd35}, {0x1, 0x2, 0x76a2, 0x4}, {0x5, 0x12, 0x13f4, 0x7}, {0x101, 0x7, 0x2, 0x8}, {0x8, 0x10000, 0x4, 0x3f}, {0x6, 0x3b08, 0x8000, 0x8}, {0x4, 0x17f2, 0xfffffffffffffff9, 0xa000000000}, {0x8, 0x0, 0x80000001, 0x80000001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r14}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:45 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 653.474903] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 653.482789] FAT-fs (loop3): Filesystem has been set read-only 16:53:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:45 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000140)={{0x9, 0x5, 0x4, 0x6, '\x00', 0x6}, 0x0, 0x200, 0x1, r1, 0x5, 0x1, 'syz1\x00', &(0x7f0000000040)=['md5sum\x89\x00', 'keyringnodevnodevproc\x00', ',,\x00', '\x00', '^cgroup):proc$*%em0eth1bdev@\x00'], 0x3f, [], [0x2, 0xffff, 0x3]}) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(0x0, 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:45 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0xcb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = getpid() setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @mss={0x2, 0x1}], 0x2) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0xfffffffffffffe01}, 0x28, 0x2) 16:53:45 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1a9800) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x25}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'hwsim0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:45 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1f, 0x40) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35, r0}) nanosleep(&(0x7f0000000040), &(0x7f0000000080)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 653.667677] attempt to access beyond end of device [ 653.673121] loop3: rw=0, want=9905, limit=112 [ 653.694204] attempt to access beyond end of device [ 653.743437] loop3: rw=0, want=9881, limit=112 16:53:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(0x0, 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:45 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xfb, 0x2}) [ 653.775779] audit: type=1800 audit(1566320025.471:185): pid=26699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="loop3" ino=709 res=0 16:53:45 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r2, 0x9f, 0xb3}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'wp512-generic\x00'}}, &(0x7f00000001c0)="3fda8dee25809e062f7255e6eb71e290e3d40f3998cd54d71718be21ec684efe1504c6154598b4ce837c740690ddcdd014ed8478f420be2e1841e4103ddb81dc600ed6de3157dfae731ece2078e74629a906c07fbacaaec6c38c786a36d1e3cdca0729e8f4f5f5cafffed980c55c4ac60895a7c19d6be010ab0737cbdbeb89b69c354f58c55bbd0b1a192b617d2cc1d306ba304b9510ac8c2315221f73a69b", &(0x7f0000000280)=""/179) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:45 executing program 1: prctl$PR_SVE_GET_VL(0x33, 0x3201) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffffffffffffe, 0x4}, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000100)) 16:53:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:45 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) 16:53:45 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0xafbda9dcb2493427, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r1, 0x12) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, {0x5, 0x4, 0xfffffffffffffffb, 0x100000001, 0x7f, 0xc37}, 0x5}, 0xa) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x9}, 0x8, 0x80800) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000040)={0x80000001, 0xfffffffffffffffb, 0x1, 0x4, 0x1, [{0x1f, 0x8000, 0x1000, 0x0, 0x0, 0x1004}]}) 16:53:45 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 654.168380] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 654.197832] FAT-fs (loop3): Filesystem has been set read-only 16:53:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x5) 16:53:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:46 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0xd4) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000180)={0x20, 0x3, 0x0, 0x0, 0x3f}) 16:53:46 executing program 0: getpid() clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="d2000000e6fbf458e31d08cfd2d5f7a1f811fdd4e2fa9fe0f7c6945dd21e09559b8c684511e99852946c8790440b3d129f1e120dfbc183395da1334cdbcd84422d743d1ad99f4ebc81b1e832d555b2e7b9421f97806b77fcc72330084cfa730059e396b1ba26ab863ba43affc1dc48e8752696e8b892ddf1d26a51aadb4064fd5c492d5f2497bfdd8932936ebd6d2fed53a702845832fe9470cb6f5f63880d85840e58649cdc3aa42100256cc0beef5ee522585fa46c3a2b0e90e772a75b3e5d9da38b6f5e517acf6ce5"], &(0x7f00000003c0)=0xda) r2 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x7, @empty, 0xffffffffffffffff}}, [0xb760, 0x3, 0x1, 0x1, 0x8, 0x3, 0xf2, 0x6, 0x700000000000, 0x0, 0x401, 0x1, 0x8, 0x10000, 0x800]}, &(0x7f0000000240)=0x1000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000280)={r3, 0x8}, 0x8) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x10) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r5, 0x0, 0x0) 16:53:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:46 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x600000) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x103e}, 0x2) 16:53:46 executing program 0: r0 = getpid() pipe2(&(0x7f0000000140), 0x9c40dce8f913eff6) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x40800, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 16:53:46 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x800, 0x10001, 0x7f, 0x6, 0xedb8}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x3}}, 0x1c8ea2e7, 0x6, 0x1, 0x10001, 0xe8}, &(0x7f0000000200)=0x98) [ 654.514777] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 654.525264] ptrace attach of "/root/syz-executor.0"[26783] was attempted by "/root/syz-executor.0"[26785] [ 654.535345] FAT-fs (loop3): Filesystem has been set read-only 16:53:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'rose0\x00'}}, 0x1e) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:46 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x103100, 0x0) r1 = fcntl$getown(r0, 0x9) waitid(0x3, r1, &(0x7f0000000040), 0x4, &(0x7f00000000c0)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0xd7b2b6bcbf26cd64, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000280)={r3, 0x13}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000180)=""/120) perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x8, 0x5595, 0x2, 0x0, 0x10001, 0x2001, 0x3, 0x8455, 0x6f6b, 0x0, 0x1f, 0xff, 0x1000, 0x200, 0x3, 0x6, 0x10000, 0xf5e, 0x9, 0xb07, 0x9a1, 0x401, 0x1f, 0x40, 0x80000000, 0x100000001, 0x100, 0x10000, 0x20, 0x1, 0x8000, 0x400, 0x3, 0x5, 0x5, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000300), 0xf}, 0x200, 0x2b, 0x7, 0x0, 0x9, 0x1, 0x5}, r2, 0x0, 0xffffffffffffffff, 0x8) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x1) 16:53:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="cbce01f8b57717596380773f5c3ea5f0a35a87c00bfd20d55baaacb193985501688b7f9ba75ac081f8358141465d0cdd1ec50655b495908d8c", 0x39}], 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@local, @remote, 0x0}, &(0x7f0000000100)=0xc) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in=@empty, 0x4e22, 0x3, 0x4e23, 0x1, 0xa, 0x80, 0xa0, 0xa4cfe2ad6b0bc604, r1, r2}, {0x4, 0x4, 0x5f94, 0x4cb, 0x4, 0xbe1d460, 0xff000000000, 0x155}, {0x82cf, 0x3, 0x91e5, 0x52}, 0x7, 0x6e6bbf, 0x3, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d5, 0x3c}, 0xa, @in6=@mcast2, 0x3503, 0x2, 0x2, 0x6, 0x9f4, 0x0, 0xfff}}, 0xe8) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x0, 0x1f}) 16:53:46 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x1) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x83f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x0, 0x2, 0x5}, 0x9}}, 0x18) getgroups(0x8, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4000, &(0x7f0000000300)=ANY=[@ANYBLOB="749f196e733d78656e2c76657273696f6e3d3970323030192c64666c746769643d", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=r2, @ANYBLOB=',debug=0x0000000000000009,hash,smackfsfloor=,\x00']) 16:53:46 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x80, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sysinfo(&(0x7f0000000080)=""/55) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="b60b884d2ed8d07cc85bbe6d29b778336075852a8df0ab61fce405d0ea7dfe775a64d56cea27ad381f93a310f0f74a420aa6dbea43ea2dd82a66d277cf7fc5aa760af5aa02") [ 655.178019] 9pnet: Unknown protocol version 9p200 [ 655.198800] 9pnet_virtio: no channels available for device [ 655.207314] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 655.219104] FAT-fs (loop3): Filesystem has been set read-only [ 655.486791] attempt to access beyond end of device [ 655.497548] loop2: rw=0, want=30129, limit=112 [ 655.508591] attempt to access beyond end of device [ 655.519503] loop2: rw=0, want=30105, limit=112 [ 655.532759] audit: type=1800 audit(1566320027.241:186): pid=26867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=728 res=0 [ 655.692713] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 655.704785] FAT-fs (loop3): Filesystem has been set read-only 16:53:49 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$peekuser(0x3, r0, 0x8000) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:49 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:49 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:49 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:49 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:49 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0xe01) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x8, {0x8000}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@loopback, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000001ac0)=0xe8) connect$can_bcm(r0, &(0x7f0000001b00)={0x1d, r1}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 16:53:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:49 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x2000b, 0x400000091) 16:53:49 executing program 1: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x40) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) socket$inet6(0xa, 0x5, 0xfff) socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:49 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x23) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:49 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:49 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:49 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = msgget$private(0x0, 0x80) msgrcv(r1, &(0x7f0000000040)={0x0, ""/13}, 0x15, 0x0, 0x3000) 16:53:49 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8001c00", @ANYRES16=r1, @ANYBLOB="040027bd7000fbdbdf250b000000080005000300000020000100080008000900000014000300ff0100000000000000000000000000015c0003000800030004000000080004000900000014000600fe8000000000000000000000000000aa1400020076657468315f746f5f7465616d000000080007004e1a0000080007004e2200000800030004000000080004000400000008000500020000000800050005000000"], 0xa8}, 0x1, 0x0, 0x0, 0xc000}, 0x800) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280)=0x84b6, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x28, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r2, 0x10000, 0x8}, 0xc) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:50 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:50 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:50 executing program 5: io_setup(0x7, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 658.363801] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 658.371949] FAT-fs (loop3): Filesystem has been set read-only 16:53:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:50 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 658.781883] attempt to access beyond end of device [ 658.792683] loop2: rw=0, want=30129, limit=112 [ 658.803659] attempt to access beyond end of device [ 658.814578] loop2: rw=0, want=30105, limit=112 [ 658.829486] audit: type=1800 audit(1566320030.531:187): pid=26973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=740 res=0 [ 658.952909] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 658.980133] FAT-fs (loop3): Filesystem has been set read-only 16:53:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:52 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x2, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0x738395bef2eeca96, 0xfffffffffffffffa, 0x1, [], &(0x7f0000000140)={0x9a0914, 0xffffffff, [], @p_u8=&(0x7f0000000080)=0x8}}) 16:53:52 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:52 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:52 executing program 5: syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000540)=0x1000) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(cast6)\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x3, 0xffffffffd927d9bc, 0x0, 0x0, 0x0, 0x0, 0x62c, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x100000000}, {0x0, 0x0, 0x0, 0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000640)={0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f00000002c0)=0x8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x8969, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000040)='./file0\x00', 0x2c5bd49a63c0e0e2, 0x104) 16:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:52 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000040)={0x8, 0x1000000010000000, 0x0, 0x158, 0x0, 0x550, 0x0, 0x0, 0x0}) 16:53:52 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)}, {&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000280)=""/165, 0xa5}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f0000000500)=""/8, 0x8}], 0x9, &(0x7f0000000600)=""/72, 0x48}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/130, 0x82}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/24, 0x18}], 0x3, &(0x7f00000008c0)=""/7, 0x7}, 0x9}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=""/43, 0x2b}, 0xff}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/34, 0x22}, {&(0x7f0000000ac0)=""/126, 0x7e}, {&(0x7f0000000b40)=""/43, 0x2b}, {&(0x7f0000000b80)=""/150, 0x96}, {&(0x7f0000000c40)=""/158, 0x9e}, {&(0x7f0000000d00)=""/205, 0xcd}, {&(0x7f0000000e00)=""/89, 0x59}], 0x7, &(0x7f0000000f00)=""/45, 0x2d}, 0x9}, {{&(0x7f0000000f40)=@hci, 0x80, &(0x7f0000001280)=[{&(0x7f0000000fc0)=""/172, 0xac}, {&(0x7f0000001080)=""/193, 0xc1}, {&(0x7f0000001180)=""/241, 0xf1}], 0x3, &(0x7f00000012c0)=""/136, 0x88}, 0x401}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001400)=""/237, 0xed}], 0x1, &(0x7f0000001540)=""/122, 0x7a}, 0xffffffffffffff00}, {{&(0x7f00000015c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001640)=""/123, 0x7b}, {&(0x7f00000016c0)=""/238, 0xee}, {&(0x7f00000017c0)=""/196, 0xc4}, {&(0x7f00000018c0)=""/38, 0x26}, {&(0x7f0000001900)=""/37, 0x25}], 0x5, &(0x7f00000019c0)=""/17, 0x11}, 0x6}, {{&(0x7f0000001a00)=@caif=@dgm, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/196, 0xc4}, {&(0x7f0000001b80)=""/246, 0xf6}], 0x2, &(0x7f0000001cc0)=""/255, 0xff}, 0x11e0d6e0}, {{&(0x7f0000001dc0)=@nfc_llcp, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/173, 0xad}, {&(0x7f0000001f00)=""/6, 0x6}, {&(0x7f0000001f40)=""/87, 0x57}, {&(0x7f0000001fc0)=""/21, 0x15}, {&(0x7f0000002000)=""/237, 0xed}], 0x5, &(0x7f0000002180)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000003200)=""/18, 0x12}, {&(0x7f0000003240)=""/64, 0x40}], 0x2}, 0x5}], 0xa, 0x40, &(0x7f0000003540)={0x0, 0x1c9c380}) ptrace$cont(0x9, r1, 0x9, 0xe12) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000003580)={'broute\x00'}, &(0x7f0000003600)=0x78) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) getsockopt$inet6_dccp_buf(r2, 0x21, 0xe03bf2dbb0f4e979, &(0x7f0000000080)=""/34, &(0x7f0000000980)=0x22) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:52 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x100000001, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x29, 0x2, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) ioctl$VT_RELDISP(r0, 0x5605) io_submit(r2, 0x5, &(0x7f0000001380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000080)="5c10a537e9d7b3483a94663e6063b34d7c586f15fb8fca4bda6940da4793dd3dc8b465255c39aef68e53c586cb3be4edf1f2c8a383ac", 0x36, 0x3f, 0x0, 0x3, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000100)="fb84f5c0b909", 0x6, 0xfffffffffffffff9, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000280)="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", 0x1000, 0x61, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3f, r1, &(0x7f0000001280)="90c00c1fb47508e07a38a56b1751d558d64bdf66ff80bfc61ab728402189ad313549a0097603c5ea8b6dd6d0dcc6bcbb49410b74e76aa26704b96363c6f2eec3bf726f682033fb73826b8741ca20afe26650b71ef18d7997f91e0cbd20f73efb4f2875ada697d217ddb594b2ac9ad4b6817ad14e9ca708a120bb4a2618615880f68e8b6d6a7f2c4fe2cd", 0x8a, 0x4, 0x0, 0x1}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0xa23a38557381d55d, 0xe9, r1, &(0x7f0000000200), 0x0, 0x3f}]) 16:53:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:52 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001700)='/dev/mixer\x00', 0x200, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=""/66, 0x42, 0xffffffffffffffff}}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000001580)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/62, 0x3e}], 0x5}, 0x2) 16:53:53 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x4, &(0x7f0000000080)=0x2) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000002c0)={0xce, 0x10000, 0x3, 0x8, 0x3, 0x36}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={r1, r2, 0xbf}) [ 661.214338] ptrace attach of "/root/syz-executor.0"[27012] was attempted by "/root/syz-executor.0"[27015] [ 661.240946] attempt to access beyond end of device [ 661.257294] loop2: rw=0, want=7857, limit=112 16:53:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x8, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x9, 0x9fe, 0x7, 0xf7b, 0x3, 0x100}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) write$selinux_access(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7373685f6b65797369676e5f657865635f743a7330202ff71ba5292edcc06174656c6570617468792f6d697373696f6e2d636f6e74726f6c2d3520303030303030303030303030303030303032353700"], 0x62) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x10) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000000)) ptrace$cont(0x18, r0, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) [ 661.296060] attempt to access beyond end of device 16:53:53 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x84603, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 661.349308] loop2: rw=0, want=7833, limit=112 16:53:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x2000000, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0xfffffffffffffffd) [ 661.398213] audit: type=1800 audit(1566320033.101:188): pid=27013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=746 res=0 16:53:53 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x652c22571421c676, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r0, &(0x7f0000000040)=""/252, 0xfc) 16:53:53 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) [ 661.727784] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 661.749576] FAT-fs (loop3): Filesystem has been set read-only 16:53:53 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000140)=""/4096) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:53 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x72f, 0x61) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x10001, 0x0, 0x1, 0x3f}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x200, r1, 0x2, 0x1000}) ioctl$CAPI_INSTALLED(r0, 0x80024322) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x14b, 0x0, 0x0, 0x0, 0x1c4, 0x0}) 16:53:53 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x7d1, 0x3, 0x80, &(0x7f0000ffb000/0x3000)=nil, 0x5}) 16:53:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:53 executing program 5: io_setup(0x0, &(0x7f0000000200)=0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x2a080000000, 0x50800) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) io_cancel(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000000340)="ee1c039783da0ef188b26ea5", 0xc, 0x4, 0x0, 0x2, r2}, &(0x7f00000003c0)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0xf65a46f951427ce3, 0x0) bind$x25(r3, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="00fbef23ff34a106cc56e7582f9b9d0800000079802937e3aca5b30ba61a83decd9cd13161e427045031dbee03fd13dcbfc8b75a69107d88ad562c27ef2ea7f8f3636f0de0ada63ea073d035423a120cb6b9983b9a2e8f20dcafd9002fa3f1f213522bc9ceda775d65ec1b9ac8126fb5668f45088a037384eea5c521d1bc78c961a1c2dfb76c8fd4a4ed3fe15e2c5fefd7fbaa306f46533ef9e2fa73a969b58047c335724008f80997536b6472421e6a3a4ab18b39334e828fde554d7c01a15084c1c12417120ccedc682cfbfdcd167e7d9e5bbedf4bedbba3be081f24eff5c8cb6dc4ca099a307910e6e2b07bae89"], 0xef, 0x1) ioctl$DRM_IOCTL_VERSION(r4, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) 16:53:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x4, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x24200, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 16:53:53 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2000, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)={0x8d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 16:53:53 executing program 1: socketpair(0xae432780ada68fc7, 0x2, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, &(0x7f0000005a00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x36, 0x800) connect$packet(r0, &(0x7f0000005ac0)={0x11, 0xf7, r1, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x20202, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000040)={[], 0x9, 0x0, 0xffffffff, 0x0, 0x6, 0x4000, 0x100000, [], 0x6}) ioctl$DRM_IOCTL_VERSION(r2, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000400)={'nat\x00', 0x0, 0x4, 0xd3, [], 0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300)=""/211}, &(0x7f0000000200)=0x78) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000a00)=@nat={'nat\x00', 0x19, 0x4, 0x490, [0x20000540, 0x0, 0x0, 0x20000754, 0x20000970], 0x0, &(0x7f0000000500), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x2, 0x18, 'erspan0\x00', 'bond_slave_1\x00', 'team_slave_0\x00', 'team0\x00', @dev={[], 0x15}, [0xff, 0xff, 0xff, 0xff, 0xff], @dev={[], 0xd}, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xd6, 0x106, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffe}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x9, 0x48, 0xf9, 'syz_tun\x00', 'bond_slave_1\x00', 'irlan0\x00', 'vcan0\x00', @dev={[], 0x2b}, [0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x16}, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0xa}, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x40, 0x88be, 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'tunl0\x00', 'hwsim0\x00', @dev={[], 0xf}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x10e, 0x146, [@state={'state\x00', 0x8, {{0x8}}}], [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}}, {0x13, 0x10, 0xdada, 'syzkaller0\x00', 'team0\x00', 'bridge0\x00', 'bond0\x00', @dev={[], 0x13}, [0x0, 0x0, 0xff, 0xff], @dev={[], 0x11}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="8056ffefa681"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x508) 16:53:53 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x7, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 16:53:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={r1, r2+10000000}, &(0x7f00000001c0)) r3 = socket$unix(0x1, 0x1, 0x0) accept4(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x57, 0x80800) r5 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x10) ptrace$cont(0x18, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={[], 0x0, 0x0, 0x1, 0x2, 0x35, r0}) fsetxattr(r4, &(0x7f00000003c0)=@random={'osx.', '\x00'}, &(0x7f0000000400)='}eth1)em0vmnet0!\x00', 0x11, 0x2) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x8, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x1000}}], [{@appraise_type='appraise_type=imasig'}, {@dont_measure='dont_measure'}]}) prctl$PR_GET_FP_MODE(0x2e) ptrace$cont(0x9, r5, 0x0, 0x0) timer_create(0x4, &(0x7f0000000240)={0x0, 0x2c, 0x1, @tid=r5}, &(0x7f0000000280)=0x0) timer_settime(r6, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) [ 662.335262] attempt to access beyond end of device [ 662.347485] loop2: rw=0, want=10545, limit=112 [ 662.353175] attempt to access beyond end of device [ 662.358370] loop2: rw=0, want=10521, limit=112 [ 662.367153] audit: type=1800 audit(1566320034.071:189): pid=27121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=753 res=0 16:53:54 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:54 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x3, 0x0) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000040)={0x80000000, 0x20, [0x9, 0x21, 0x5, 0x4, 0xfffffffffffffc15], 0xfff}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:54 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1, r2, 0x401}) 16:53:54 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCNXCL(r0, 0x540d) [ 662.503990] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 662.526651] FAT-fs (loop3): Filesystem has been set read-only 16:53:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:54 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x13, 0xfffffe1f, &(0x7f0000000040)="c1d7dccb17a72b787593c35d2ab9dab7fb8ceedf9f911416b09fe16101999ef4486e2c9e5e7dcbb80662a48a1b57c9"}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, {0xa, 0x4e20, 0x0, @rand_addr="f2f00afea3447ea48f35dbf39600bb76", 0x2}, 0x5, [0xffffffffffffbe1e, 0x0, 0x4, 0x20, 0x100, 0x401, 0x40, 0xe]}, 0x5c) 16:53:54 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x10000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0)={0x4, 0xce, 0x3, 0x1, 0x5}, 0x14) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xa34c}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={r2, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000100)=0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x10000, 0x2, 0x820b, 0x3ff, 0x7, 0x80000001, 0x6eaa873d, 0x3, r3}, &(0x7f0000000180)=0x20) 16:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:54 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='/dev/mixer\x00', 0xb, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_init() 16:53:54 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x1, 0xfffffffffffffffe, 0x6, 0x80], 0x4, 0x1f, 0x292, 0x5, 0x7, 0x8001, {0xffffffffffffffff, 0x1, 0x81, 0x8, 0x10001, 0x4, 0x100000001, 0x927b, 0x1e745bd2, 0x10000000000000, 0xffffffffffff8001, 0x10001, 0x7fff, 0x9, "1aa12f71559d151499e729a2de3b8edbc1a165f862a3e0dda1d33de8567a71ce"}}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x52850cc71dc0ea84, 0x0, {0x42, 0x3, 0x4, 0x8000}}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400, 0x0) flock(r0, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x5, 0x0, 0x80000002, 0x0, 0x0, 0x168, 0x0, 0x0, 0x0}) 16:53:54 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) 16:53:54 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setpriority(0x2, r1, 0x3) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:55 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:55 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0x0, 0x0, [0x6, 0x1f, 0x100000001, 0x1]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) write$cgroup_pid(r0, &(0x7f0000000180)=r1, 0x12) 16:53:55 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x40, 0x3, 0x7522, 0x1, 0x3, 0x7}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0xffffffff) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0xfffffffffffffffa, 0x9}, {0x7f, 0x10001}]}, 0x14, 0x2) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:55 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4348bbadd3ab338b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xf) ptrace$cont(0x7, r0, 0x0, 0x9) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:55 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x100, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x9, 0x100000000, 0xb3, 0x0, 0x9, 0x6, 0x17, 0x100, 0x10000, 0xd862, 0x3d9, 0x5}) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000140)={"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"}) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000040)) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) tgkill(r2, r0, 0xb) ptrace$cont(0x9, r2, 0x0, 0x0) 16:53:55 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x201, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 663.357459] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 663.384542] FAT-fs (loop3): Filesystem has been set read-only 16:53:55 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$rfkill(r0, &(0x7f0000000040), 0x8) 16:53:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:55 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$bt_cmtp(0x1f, 0x3, 0x5) 16:53:55 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x6, 0x1, @raw_data=[0x10001, 0x9, 0xfffffffffffff800, 0x54a, 0x2, 0x8, 0x1, 0x401, 0x9, 0x0, 0xc94, 0x5, 0x0, 0x8, 0x0, 0x2]}) 16:53:55 executing program 5: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9ce5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0='bpq0\x00', 0x0, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 16:53:55 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:55 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 663.881346] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 663.906451] FAT-fs (loop3): Filesystem has been set read-only 16:53:55 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc432a) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x5c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x9, @mcast2, 0xffffffff7fffffff}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x1, 0x100000001, 0x85, 0x8, 0x3}, &(0x7f0000000340)=0x98) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r1, 0x8}) 16:53:55 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$vsock_dgram(0x28, 0x2, 0x0) 16:53:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 664.241079] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 664.254786] FAT-fs (loop4): Filesystem has been set read-only [ 664.526965] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 664.536159] FAT-fs (loop3): Filesystem has been set read-only [ 664.621234] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 664.629049] FAT-fs (loop4): Filesystem has been set read-only 16:53:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:58 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x100, 0xf900, "51843e19f4ec567e6bcf543e7db7aa93bf79d19bb1fef555", {0x8000, 0x8}, 0x7c49}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'changehat ', 0x3, 0x5e, ['vmnet1.\x00']}, 0x25) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80, 0x0) 16:53:58 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x126, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x0}) 16:53:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:58 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:58 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:58 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0xe1eb49406e422f8d, r1, 0x0, 0x1ff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:58 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000040)={0x4, 0x0, [0x3f, 0x3, 0x63, 0x8, 0x10000], 0x200}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x181000, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x29) 16:53:58 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_robust_list(&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x7, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) 16:53:58 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-control\x00', 0x2c8000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x800, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x7, 0x3) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000500)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000040)) ioctl$DRM_IOCTL_VERSION(r3, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000340)={r4, 0xf9, "dc88ba3bd9ee7a428592752745e65a1ed8b7ee344260b778541101571868aaf44bfccf53a34302f07cc86285c7ad0161fd0b448435e49825d21769dcdc5b00e482a736c9dc67aacea517e469a317a5d3b5a51af2f57edcd2fc9afc1e4077aaf7eb1f8360bfc9655ca87aa400eb2287f710e0f5d5ae37f33a666585e3a6cb3058bb45a020ec339fcd8fc3a79a772cb6699f72f77c9a6ff74883e8e1bed335bc06797fa594244c7959b91c61af806df1721d654886f248113e12fef9b215e9d927355eac45968b5e3eda97b1b64ddcac86d669d63f9d92984fce18f1c16ecc7c518e111123e4e8fc6a12bd4c09012426deb55fa77cfb89f5cd01"}, &(0x7f0000000480)=0x101) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0x72, 0xbe, &(0x7f0000000080)="9bb57edaa69619c2db0b813a0530fb722a58c36c3555ef2edd27980d57caa42af18bb1f98ec3a0a83364b69c8c2e9185713793bd89a78b95029aa6d39173ac2932582382f1da64fa6d62d4099a512c1df38b82e91e2cdc066b33a0e1ea65ec4a040c439e0d1580518294903c68b31a87abde", &(0x7f0000000100)=""/190, 0x1}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x4000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000004c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1}, 0x20) fsync(r3) 16:53:58 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x101000) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x3ff, 0x101000) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x801, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:58 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80213a201ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r1, 0x0, 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = semget(0x1, 0x4, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000000)=0x80000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x6, @tid=r0}, &(0x7f00000001c0)) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x40, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x990000, 0x1, 0x1, [], &(0x7f0000000080)={0x9a0908, 0x5, [], @value=0x9}}) [ 667.187592] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 667.202720] FAT-fs (loop4): Filesystem has been set read-only [ 667.227249] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 667.242078] FAT-fs (loop3): Filesystem has been set read-only 16:53:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:59 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0x1}, {0x9, 0x1}]}, 0x14, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:59 executing program 1: syz_read_part_table(0x800002, 0x0, &(0x7f0000000080)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:59 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) r1 = getegid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000200)="11dca5055e0bcfec7be070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x5fe2bdfcdae9bc2b) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7], {0x77359400}}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x1}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0x53cf) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdeb}}], 0x3fffffffffffd33, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000540)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, r1) r11 = getpid() r12 = geteuid() stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001000)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000001100)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000012c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001300)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000001400)=0xe8) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = geteuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003f40)={0x0, 0x0}, &(0x7f0000003f80)=0xc) fstat(r4, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005680)='./file0\x00', &(0x7f00000056c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r7, &(0x7f0000005740)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f00000058c0)=[{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000800)="dac2c907b5e760dac11ea5d15bfcabde002ef4a8347b61612dcf81a1775f6a6f0e3329068efd4b93c6f5155aadb6f792163f7e407ed705772a1d333631c9483240490e71eaff3027675e25db2a3529b087ef7189218f53b6b88bed5bc6b92c68fabc39ce3cf6203f53ccc79a56ecb126148a3a2bb08c0276", 0x78}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000900)="2a627d110e0eddc718804961582b2c533fb026e92608825923ebb75edfe1baeceb7527a3eb35e8ee80f373466a293cc5c680a471f0b4ba37cf92e2ef2290c00cac0d72bbaf7abf6a3e39e39bbdf632195dfcaf4eccd110801f3c1e13f08519c1b55bfb8181d1baa2fb661f0cb376540a76128b0df8446aef5f005f679bfce40d36494b33322c6f5410fce321956b84874ab27d5a763f", 0x96}], 0x1, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [r4, r5, r2, r7, r5]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r1}}}, @rights={{0x2c, 0x1, 0x1, [r7, r2, r6, r10, r6, r6, r8]}}, @rights={{0x18, 0x1, 0x1, [r8, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r1}}}, @rights={{0x30, 0x1, 0x1, [r7, r3, r7, r4, r7, r5, r10, r10]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r1}}}], 0x118, 0x40000}, {&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000cc0)="a2051b3667a9d8305c0f1f2e8809edab84b1810f00d9bae8b8429cf36f54c3c6268183902d4f5b584015090827a33889826b44fd3c722237be1edc7d3d3480df00b20d5dfe13fee5587fc7de77bac7c15601ae35468c8ef9f2989228438ee31564fe5b12842b1b25e1bac24430c622c0d372f92fe57564adfd66a1bd8b2633f67e1c0f2e1656fe18ef074479e90f0ba3e4cdf40bca70de24516c775b33d286ffdef3f07f", 0xa4}, {&(0x7f0000000d80)="e5b709689f9701fd6a34a4", 0xb}, {&(0x7f0000000dc0)="a502fac39a607ba15677f3880a93623cbef421895d9624bb507a8dacc8dfe885d426b47afef30fb8d5eae264daf20fe7ec83f8a12e2a1746548fab1b6fa1bd49477e32bfb1fda2ceddc3e941ef838b75a7199494e9faeedbb61119b214c1cab02713176a3f", 0x65}, {&(0x7f0000000e40)="bb224aa834ff4ee1115ad924d6568c788915792221020461e7f256be5f21bc7f7cadaf9c0d", 0x25}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)="381d85787a2242b7284ce6408a6e670ee23ba15c4afb411174d45c257471904c5aa8004b0e80d09bc17c7a9594f355a66ce45095c0e6adf0cc856079f2660b44904fbe5d62a85dde4ef3bb486bdd09ac84d1d320407c71651e9eb21e6df5e0d53f19459730150d7eccf32c88d42f066bfb45429caa18562fe58d8407c8f56f326ab7", 0x82}], 0x6, &(0x7f0000005c40)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r15, @ANYRES32=r1, @ANYBLOB="000000001c0000000000000001000000020000001a1c1e396982a490721f1c8359b3b27e578a3f9dda7dae9ddd8685e1b8b0057ed946bc695cef9321c58c8ee0ad747cb44892363a467bac6179ff9139f4acdb85b7c8e0d28a57acab65c49fe4d9f5ae1eadf7afacae32a506142f93d4968bdbca7a88cb5a456cb5615d02a3373d3203839594207f5e5301280ce1f4ac4c1d3af8e7288d9ac4fd728908a7afa57cbb0a9d6a4d260a983784ee8437756eef5caf50f1beda3fb817715fcd80b547d479c36b478b9cd9a51dbbc8ff36a92fab08bd6d2e3cf0dc9a0b89395f3835a8685dde0927541ed520efeb938390ef1b3161d62005c3ccbd", @ANYRES32=r11, @ANYRES32=r16, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r17, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x184, 0x4}, {&(0x7f0000001500)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="8104d58372b36ae00d89e3bcb78cf82fd4aac588fbf9a26f6d955fe4a150d917aedfcb2900893b1cc4ceab1b35c4f3f45f8fa1a322c3d9ccab44d2b7cc", 0x3d}, {&(0x7f00000025c0)="a7e52b63e03f02ac3983d745e9c9e16f9128c75d456aa3c7ea3048d24139c92b9050e55ca26872fc938500585cdcc4256154", 0x32}, {&(0x7f0000002600)="9f9e1e6d2b1966bc98a7b4e10f63d8fad24c82b2d6dfa34cb210750bae08270e758cdf517ab08b95fc23bf82e8f9cb48f4fc7c4c2703c760df236c3b95d0700e800c536ab43355ed6dcf32e0646c2226f903e05b5ccbca9f1bf0b00ac81420d9f527f87f4c847d085e1549f7aa1ebda632545274babf57ec995b9b1197f5abdf724391288844", 0x86}, {&(0x7f00000026c0)="d39a8054d39c6d", 0x7}], 0x5, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r18, r1}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r11, r19, r1}}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, r2]}}], 0x78, 0x20000080}, {&(0x7f0000002940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f00000029c0)="47ceb2b0c1688b66547fc6000b1a611b65e89c7605f1bfd2c3b0b790b1b5c3b2e9ed706402fd13a58428c23aa8b6daa86f18179d42ebdfb2d31f3df386116fd19495752f8276b297d799d85c7f017a36842eb017bd19234cde19e6be39994d289933a60d68853ea10f172dba80c94e28c6dae26fe84a26d2ae9e062a873b1b4bdde7920c377805ed2ed875c1ab2e2ae93eda6ee16bde314eee76b81c1825", 0x9e}, {&(0x7f0000002a80)="968fd084d09f7b47e0c0682dae5f5d0ccd4b508c8bbcec72a115f8a6fa92ad2b89f319585ed0444c86a2321ae45faa6763ea117ef047ed728ae7049181740461aa271ffc8ad2dcb186982be198e8cd1cec9195f233aff5893e7653132a99292e396359a924b05fb99d5f8a11f6663c2ee871d5749a3436ab273793c31b4c0800904c7db6089ef9569bf6a159922555dab14ab5cfa6c5fed5cdfb047371e16bf85475ba05b4e77337d3789acf4a37d025de87fccf21941fc2f00095f527b6", 0xbe}, {&(0x7f0000002b40)="06aae90a9cd623bdbd3270490e58d7a15ab483f464901cc0a2c3b6a388d111bfa52a64e5c772fab166670aaaa857e1ad58a08c44cc70a1622e622e7b610b4dabfc95da6ebf8cabba41583809d5d04bd2b668c5abc91ec7cb5ec8c742f856082a8af282e1dd31a731f801910296a4452035d28c9cf0f9cc91996539ed7edffe3aff57a3e142468523c0240a7ea4e04207616a0e38689a1913a10454677d753a8456ab6a3ca25c41580f6992f274b0c2e121c6b588f1a9d2070df5de699a19dfc532dfee459506d7e5d420ca477921acadd96c6f853040d5caf0955a53044c5d74aadbf65799a48f", 0xe7}, {&(0x7f0000002c40)="86eec150a551755e4ea09fd9b78d217a0cade97f9fd88f48645a87e99f89f10baf56421b44e25e0c9ca9dd6086da4e6ee834fbf84547065cb19799e9b9dffa4a79914cf7ea285ce81543979a", 0x4c}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="a8e4a65f83af0db1d614c04529be4794b5aed8629c72d594f6bf7e247a270e400ab0a79c7109b3807cf39fd64082de2357f16dec9c4855285d5ab7a2a3d5d2f49f151b96dfe14ddfa3d0e908105fdc77f6ec3a9aa42c9f85e05e2e5837cd38790a25d77612", 0x65}, {&(0x7f0000003d40)="90bdebbb419de3308ada23f2c87effcd44ecedaf6159b82a669d750d8b9cd2905036aae5dc48737a4af9b6e08f85b674c65df10883c1233e3d069d3adc1b2fbfbd72af3fa0d0653bcfead8b7240f66c464911e5ecbef0af61781d8685e04bef502583133cdf7b386de979bbc4f54decf81f5f6408ee4c304fbc0b64301bd2c12da4c3e9fd7d848c4985b993962c08d269e2b66840cd1fdf16fc2f5a2283e5199f976c518a126a4553b5865ef098aa848c4cab9788b7188e9b83c65d9079e9775ee08520b34", 0xc5}, {&(0x7f0000003e40)="894b66c68a53954be1b859fbb7658a4df88839d07e666d2e14d8591cea7a60023fb4a01ec808144e9ffe63beedc5550b2dcaa33c0a182b6f8b9063854f866a35bbeb1fa81539f0f527726d714e40befcec6d32db3a65b600a2ec020f25", 0x5d}], 0x8, &(0x7f0000005e00)=ANY=[@ANYBLOB='\x00'/16, @ANYRESHEX=r19, @ANYRES32=r20, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r11, @ANYRES32=r21, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x1b4, 0x4000000}, {&(0x7f0000004040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004280)=[{&(0x7f00000040c0)="11cdc16069903959c506bad156a91c15104f2c4a647606be67cb778d17053f71073c9413fc706e90d3a98b035f85ed680411fa404b73dbf40a3bb8b09a84c7ef51d391a791f220193f07e858e009e7e51424cdd6b9ea625f448c7c35590ab9052d3fafdfad222e0ab5ddac5dc775e6628790b1c9b96de8c648aef42c6416ee5a59ce238f8d145b5a8ea5e5f8ceefeddddb6b6ff0a47cfacd94875d5866ac3dd49c3ae513b4abb71f44338358ab72c51eeb5b6f5ebfdc8850a72489413bec", 0xbe}, {&(0x7f0000004180)="478ab8079d08d689c7052b085f18aeebdfd97c4b749587d65536bdd79f6c404c1fc943de4b3655e1bb7cd8be471c8625f6ca4bb6ea30894b8001310377cc5aed8314661eefaa5fc9b1a8df64cf147c2770d280566be96a8c92fd6e583440b7d25fa30b1ae56cfdfff6af3a9213c6f6b408fac126d6bcac30aa82d3c8f7e087a167d28766e99f4178170db5a10a46bd927911e3408a68e532e02d8dae1b614cd41daf761f7eb51cd8cffe041e12471fde35de47559b2b8116e97199bb50c04c2911e447159a2641c200137f795c9f282ad83591", 0xd3}], 0x2, &(0x7f00000042c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x20, 0x1, 0x1, [r9, r6, r8, r2]}}], 0x38, 0x800}, {&(0x7f0000004300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005440)=[{&(0x7f0000004380)="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", 0x1000}, {&(0x7f0000005380)="f2f61f651495ab1696858faddf9ee0fdf548da34ed44de7d724f137595963d7834e370f0da0f829d302f21daaaf3615a309ffbc91343ea3ca8503ca3c142c57bebe99e0171037f7fe8d4849d6ed7c8a30123213ccbfe24c06b5d8121261754502589c3df0a3e86e4fa23de86f5c7db21972512d81439ff7873d71fbc678140936a59fcbd06c5c6bd5a", 0x89}], 0x2, &(0x7f0000005500)=[@rights={{0x18, 0x1, 0x1, [r9, r10]}}, @rights={{0x18, 0x1, 0x1, [r4, r9]}}, @cred={{0x1c, 0x1, 0x2, {r11, r22, r1}}}], 0x50}, {&(0x7f0000005580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005640)=[{&(0x7f0000005600)="257c554baf10dd12433aa457f50ab9b4b6b8064ffcdc45731abf3ba12020f112dd551e0c6d6b036ec8e35625b72e8f617cda9b5d9c5e6e87b54b93", 0x3b}], 0x1, &(0x7f00000057c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r23, r1}}}, @cred={{0x1c, 0x1, 0x2, {r11, r24, r1}}}, @rights={{0x1c, 0x1, 0x1, [r6, r3, r5]}}, @rights={{0x28, 0x1, 0x1, [r8, r4, r9, r3, r6, r3]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r10, r5, r3, r2, r4, r8]}}, @rights={{0x28, 0x1, 0x1, [r9, r10, r4, r8, r8, r7]}}], 0xe8, 0x4000000}], 0x8, 0x8000) prctl$PR_SET_PTRACER(0x59616d61, r11) prctl$PR_SET_PTRACER(0x59616d61, r11) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r25 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r25, 0x40605346, &(0x7f0000001240)={0x6, 0x1, {0x3, 0x1, 0x9, 0x0, 0xfffffffffffffffe}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast}, &(0x7f00000001c0)=0xc) 16:53:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:59 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:59 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:53:59 executing program 1: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000000)={0xf, 0x1f, 0x4, 0x3}, 0xf) 16:53:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:53:59 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x20d, 0xffffffffffffff01, 0x7, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r1, 0xf0, "945a824ece8f0a3d8fbd0fc70ead403d6f5c4e7180f7d47099c86c7b5240cd7a8284a95d688b8050888104016fb6886012b4c00a87c70df04100bc9e99ed2c5741055c3b2bce77ad9f780b2c82dd668a43267c6d4edfe2e5eebd37f5bbdb6e77d0de3b093a52efb8ed562d746c30d20e54590ebd6605cc6da655e096e9080e5eae58f9fe0321e797399eabe57fafb49747d721b1361e8fa0ae0ab220ae57b22e6d6e03a7ba6e28dc53918d4d7b0af800b7d1b1e981525c9e9763030a0cb37609535b7ab130970420c38988a5240f604bcf7bc5c420b778bba3a8c147d152b0e7286748d6b356f985bc7c685f6bb410f5"}, &(0x7f00000001c0)=0xf8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$isdn(r0, &(0x7f00000002c0)={0x22, 0x809, 0x1000, 0x4e35b79a, 0xfe}, 0x5ec) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9) 16:53:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797374656d2e00681bdbdd30988a85a9470ef155f4561d03000a9125a9fc60847af71a51de6529ec"]) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20701, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 668.082364] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 668.100451] FAT-fs (loop3): Filesystem has been set read-only 16:53:59 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0xfffffffffffffff7, &(0x7f0000000080)=0x2) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) 16:53:59 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x200, 0x0, 0x44, &(0x7f0000ffe000/0x1000)=nil, 0x57ce7488}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0xf338d04e651c5d83}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'batadv0\x00', 0x8000}) 16:53:59 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:53:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5", 0x22) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:00 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x80000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x2, 0x4) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='/dev/mixer\x00'}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r0, r0, 0x1, 0x1}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:54:00 executing program 1: r0 = socket(0x19, 0x803, 0x0) getsockopt$sock_int(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)=0x1e3) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:54:00 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_WAITACTIVE(r0, 0x5607) 16:54:00 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000180)={0x100, 0xfffffffffffffffd, 0x6, 0xffffff44, 0x0, 0xffffff41, 0x0, 0x203, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'security.', '/dev/mixer\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x3) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 16:54:00 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x521002) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xc042, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044dfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 668.675232] attempt to access beyond end of device 16:54:00 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/248, 0xf8}, {&(0x7f0000000140)=""/60, 0x3c}], 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 668.696028] loop2: rw=0, want=11057, limit=112 [ 668.715469] attempt to access beyond end of device [ 668.732887] loop2: rw=0, want=11033, limit=112 [ 668.778765] audit: type=1800 audit(1566320040.471:190): pid=27444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=788 res=0 [ 669.179089] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 669.215290] FAT-fs (loop3): Filesystem has been set read-only 16:54:02 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3b, 0x1, @thr={&(0x7f0000000140)="b36264f723a4ab690d81a14e35c718d138735578dc0603231a95a286da99766e964c42de3522280e732dbf9fa8917db1422c561337f94ea4917b41a69a200b5bd62071657f1763cc65b0e43df8d3ab3bb148c9e3b4b68ad41caec975ac733d6b913237918d98376cb25f3bb1e00d5f15d6b25713cdd17497bdb64411566c66ab9fc65bbba9d1493148be821c032a944e09d2eac27d6e92c498a1d75dd0ae1ab35b876f7f70a99ea98215e1aebc094f8c7b48c56ddd827db3", &(0x7f0000000200)="3e0767d57c5a48a185076439fccf7ad476eb0a7f523b1d1643c200174097fc4a8fb691dde533c28a5536922f1464ed77664d581c535bf92142992ac76d7de5db9bf1c877e6f24c621e3d22"}}, &(0x7f0000000280)=0x0) timer_getoverrun(r2) ptrace$setregs(0x81445bd2be0332c2, r0, 0x3, &(0x7f0000000000)="1e1eb2c69f0e0a96deb07a517c0bf2c42fcd87cea87c643db04dc8374c659bad8f7aeac08b445b9d16eb62edb9ecccecce229708156295835abbe142ab869b784fa38a968aed9c864195decdd4aba325c9fdc6cfaea96f3b3e661cfb1bc6ae27e712af2581bcbc9178453210647e7bb5db7326e888c814d149918f1d1db1") 16:54:02 executing program 5: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100080c0900fcff0000040e05a5", 0x58}], 0x1) 16:54:02 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$nbd(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xca) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x0, 0x4a0900, 0x3, 0x8, 0x7, 0x1}) 16:54:02 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, 0x0, 0x0) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) 16:54:02 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x4000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x5, 0x80, 0x70, 0x3, r1}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:02 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4084, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:54:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 16:54:02 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:54:02 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x1, 0x2, 0x81, 0x905, r1}) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10) ptrace$cont(0x18, r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x18040, 0x0) ptrace$getregset(0x4204, r2, 0x6, &(0x7f0000000140)={&(0x7f0000000080)=""/16, 0x10}) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 16:54:02 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000040)=@netrom) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0x80044df9, &(0x7f0000000240)={0x3, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r1) 16:54:02 executing program 5: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats_percpu\x00') 16:54:02 executing program 5: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000004000100000c0900fcff0000040e05a5", 0x58}], 0x1) 16:54:03 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 671.398659] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 671.416828] FAT-fs (loop3): Filesystem has been set read-only 16:54:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, 0x0, 0x0) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:03 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={r1, 0x80000, r0}) ioctl$DRM_IOCTL_VERSION(r0, 0x80044df9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:54:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b0000020000004e5295ba145eab53"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000900), 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x4c, r3, 0x323, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffff80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8811}, 0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02120000833b7c89302322034963f23d92a7a088a425066c460a50172f3d2d7f1a0d0fe91e477708e7fb15cb44058b239afab1b01b"], 0x10}}, 0x0) signalfd(r1, &(0x7f00000001c0)={0x3c2}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_BMAP(r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x1, @default, @rose={'rose', 0x0}, 0x7, 'syz1\x00', @bcast, 0x0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x10001, 0xa2, 0xe504, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x7435, 0x0, 0x400, 0x8}}, 0x0) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, r5) r7 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r6) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000004c0), 0xc, 0x0) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)="95c9e7ad96d33de061da4060272e0ef04897bfe0468c9ba8967126ebe592f5831b6183b209b59eba5dd5b3535e012c163b0d2b6aa61c63434f58cc85834428a4935f1d00feffeb743c28070f048e60d03d6dbc8419594b05959bd4a71260a764c45780f69837928dd0b6092812a6eea1e7fee8dc98689bd44e", 0x79, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r8, r7, r8}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 16:54:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:03 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x5dc291) lseek(r0, 0x80000, 0x3) 16:54:03 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, 0x0, 0x0) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 672.374860] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 672.383650] FAT-fs (loop3): Filesystem has been set read-only 16:54:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:05 executing program 0: r0 = msgget(0x0, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0x40, r1, r2, r3, r4, 0x55, 0x3712}, 0x703, 0x7000000, 0x3, 0x1, 0x0, 0x7, r5, r6}) r7 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r7) chdir(&(0x7f0000000000)='./file0\x00') r8 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r8, 0xc0345642, &(0x7f0000000080)={0x4d5, "dfb8ccaa9dabd8231864f4be7ab969c5731a0bbc4a29edeccbe4967b5dd0f43e", 0x5c0608f4eef5d9a, 0x1}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x33) ptrace$cont(0x18, r9, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r9, 0x0, 0x0) tgkill(r7, r9, 0x40) 16:54:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b0000020000004e5295ba145eab53"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000900), 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x4c, r3, 0x323, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffff80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8811}, 0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02120000833b7c89302322034963f23d92a7a088a425066c460a50172f3d2d7f1a0d0fe91e477708e7fb15cb44058b239afab1b01b"], 0x10}}, 0x0) signalfd(r1, &(0x7f00000001c0)={0x3c2}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_BMAP(r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x1, @default, @rose={'rose', 0x0}, 0x7, 'syz1\x00', @bcast, 0x0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x10001, 0xa2, 0xe504, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x7435, 0x0, 0x400, 0x8}}, 0x0) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, r5) r7 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r6) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000004c0), 0xc, 0x0) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)="95c9e7ad96d33de061da4060272e0ef04897bfe0468c9ba8967126ebe592f5831b6183b209b59eba5dd5b3535e012c163b0d2b6aa61c63434f58cc85834428a4935f1d00feffeb743c28070f048e60d03d6dbc8419594b05959bd4a71260a764c45780f69837928dd0b6092812a6eea1e7fee8dc98689bd44e", 0x79, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r8, r7, r8}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 16:54:05 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xd, &(0x7f0000000200), 0x118) 16:54:05 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:05 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_int(r0, 0x10d, 0x10, &(0x7f0000000040), &(0x7f00000000c0)=0x3b8c3dfc45cf9699) 16:54:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x5e, 0x800000000040, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000280)={0x10001, 0x18, 0x7, 0x2, 0x4, 0xffffffff, 0x81b, 0x20, 0x7, 0x101, 0x7, 0x2}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mkdir(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fb39000496134fde975c4413de6575f11f2f3ad77d3b95593eedd52cddaea06088233300efad5ec275a74a4f7700856e188006e710401223"], 0x39, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) sched_getattr(0x0, &(0x7f0000000340)={0x30}, 0x30, 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 674.332546] attempt to access beyond end of device [ 674.362066] loop2: rw=0, want=15729, limit=112 [ 674.378232] attempt to access beyond end of device [ 674.408960] loop2: rw=0, want=15705, limit=112 [ 674.434562] audit: type=1800 audit(1566320046.131:191): pid=27610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=800 res=0 16:54:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003000000010000000000000500000000000000000000000a01000000005f00"], 0x0, 0x33}, 0x20) [ 674.612926] attempt to access beyond end of device [ 674.638126] loop3: rw=0, want=3889, limit=112 [ 674.663289] attempt to access beyond end of device 16:54:06 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f0000000480), 0xfffffffffffffe54, 0x0, 0x0, 0x9a) splice(r2, 0x0, r1, 0x0, 0x11001, 0x0) [ 674.685103] loop3: rw=0, want=3865, limit=112 [ 674.704524] audit: type=1800 audit(1566320046.411:192): pid=27622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="loop3" ino=802 res=0 16:54:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x800080084504, 0x0) 16:54:06 executing program 1: 16:54:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b0000020000004e5295ba145eab53"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000900), 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x4c, r3, 0x323, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffff80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8811}, 0x1) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02120000833b7c89302322034963f23d92a7a088a425066c460a50172f3d2d7f1a0d0fe91e477708e7fb15cb44058b239afab1b01b"], 0x10}}, 0x0) signalfd(r1, &(0x7f00000001c0)={0x3c2}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_BMAP(r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x1, @default, @rose={'rose', 0x0}, 0x7, 'syz1\x00', @bcast, 0x0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x10001, 0xa2, 0xe504, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x7435, 0x0, 0x400, 0x8}}, 0x0) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, r5) r7 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r6) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000004c0), 0xc, 0x0) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)="95c9e7ad96d33de061da4060272e0ef04897bfe0468c9ba8967126ebe592f5831b6183b209b59eba5dd5b3535e012c163b0d2b6aa61c63434f58cc85834428a4935f1d00feffeb743c28070f048e60d03d6dbc8419594b05959bd4a71260a764c45780f69837928dd0b6092812a6eea1e7fee8dc98689bd44e", 0x79, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r8, r7, r8}, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) [ 675.137730] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 675.155488] FAT-fs (loop3): Filesystem has been set read-only 16:54:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$setsig(0x4203, r0, 0x9, &(0x7f0000000000)={0x32, 0x0, 0x80000000}) 16:54:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337", 0x1d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:08 executing program 1: 16:54:08 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:08 executing program 5: 16:54:08 executing program 5: 16:54:08 executing program 1: 16:54:08 executing program 5: 16:54:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000055c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x62, 0xa000) sendmmsg$alg(r2, &(0x7f0000005480)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="13dd13b50ab85b9823d931408156cbfbf577da796d6562f9845b0091177a2e55d6929b3ffd81203e41cd63ad41528d27e99b5e6af148db7491d90f3fd2a444028f97624a3ec624afc2afc2acce59197c00b59ed02a9a24112dce909513d2f0a2a7f4f6b50f1e2c8e2ff19135f9d61bc707ee2549754a7db266583adcbad056addf143e9d9ec1d7349273de38b0b8eeb2ebf64d72e04dca", 0x97}, {&(0x7f0000000200)="37fa0b532e926270262f810b4e6f123dae156ef001d95afda230ef8134a130189fb6357e33726435dbe585e021fd13e4dbcd44bd181b2ffb7ce5a95b35a00430ad54977244076344ffedd34a9a8431354d0834b71c6afa1435e156a96aee9d9366ce908bee752d9abe81f09f7d153ef1f1f8d692d5c39e5b70b59e2bf50aaa1b1a6ac2816b4826505422bd3674a3188ff467084bf7bfdd20eb83058d059406825779d696026ec5231b26079f804b8f90a4a741d7f288746d444af7bc36a25a93b1a8cd2ca60d4197744728d49204caf9792d40ebf608079cb3706f78e4a0a93aaddc5fe7c2e7ab9e6a82196a89", 0xed}, {&(0x7f0000000300)="e71c1fa51f5613e0c34d30709e5334b4ec01bffda43e6244b99a3ed5273d943bbe71c0e68da5a33ce4539298544db4e519470ec19db208ef79c9d55de6e50e780da2c939ee11e6a11224be3507f62ceb2f30335a2295ad66050eefda248b79f6f9f999223ad268bec670f9a183bdf9669e9877ff10a91ec954c21e3ff3f28263681f8d9c34e9566e37909ff84e6b13", 0x8f}], 0x3, &(0x7f00000003c0)=[@iv={0x38, 0x117, 0x2, 0x20, "6933536d7902fa8a9d4bef4aed30dcb8ed78b0e6e24b0e5e97bae9f1a19c51f3"}, @iv={0x30, 0x117, 0x2, 0x1b, "ae56c2368434a6951e9d38d133e39722dfb7f1cfe207c57d7a32bd"}, @iv={0x20, 0x117, 0x2, 0x5, "6688234f03"}, @iv={0x70, 0x117, 0x2, 0x5a, "7c8bd432ff99279b851b10e2ad8acd175fca8a91a76e41cd9ba3dcb0f28fb7266e0de8ef2eec0fac830a095ccbf5de1af4b2cfbac063a7afed762b011454206003f760bb5ad97aa4f30014e33462e7540b24d0d144b088359a99"}, @iv={0x88, 0x117, 0x2, 0x72, "bf27833e461b131d2a89a5a02d38ef1453104c3d4854c7731fe6ce25243eb0e595699a6a0a23e0e9210d0e8bfbd8e55cb9d8ec78b1f1044cc7b49c438eed487b481095fba87c0c8878d96ba7c1f9434452e1230a221a9d9dc00e981e3153bd71c0f6624fef516a0bd0944f65b03817d4389a"}, @iv={0x1018, 0x117, 0x2, 0x1000, "44e25f75e31c31779dba2ce59290cd07f22659b8bcee2143fc05002c2521c70c63af282646617e55a3d0576fe520f8b77651c492750c61d73dc17bf85eff7596f697b46be24decd93ecd18212de6a7543293dc9f2e1fee8726e13ef724bda9c586be85305bd4cf9e3011fb4c416eaa985a1091b2ec1b1d32c122be4bf77af4b49f2ee700e6bb3c68483db8c766b14e855111bd3bb98fd24e09616c565fd1beec227afae01234430ab052599d6eb3dc2564746c9375faaee8716f2184e99d4e560be3de8d5f6f52459516bb83f76c273623b1ebda6d57d927e280e0d095c57b14ef8bcd262be25a208acfa12b38ef9c18c5e3d78cd1f43a305511f279b7224d7f1f84c52d6642b56abe27f2f8c31485c7f2dd049a474cdaf8e7975bb0a28cf66c9f69266a61dab775061b44f31ea7852f2cf14b5c0f9ccfb5e642c9a6daf9a41e052ecae4fca960cf5040bc0696aaeec08426736c585afed2bb89dc77b8e7cf99f6cfe4d0ac3c3a9ddde918c22bca53c763bf8fb914f2f6af5622e1dd5307ec25cb17c200b853a44082c47612a57306c9e79fc80f9c6bd64d4af5c786dfc67cd816f880fe085432aefefcf1237dcddea6db51670a8c953f4d667b4738b76266abdf24d814426371d9ea86c341e5ec94af1266bc583253706729ca79a2d80290f8086762731008f1cb1b543f0853d30b96270db656cbcb10920f9f22b1787538f1df3802be5bf61879e13ba75c13212c705f08a5d23bf13d8e4f1be1cbe43cc677cc3fa5b9378bdac84063df6b469e35737828e200d5089bb1b84b6d261729caa0cdcab25af52ece23725703bf0829e8f58810ff5f34615998e62478579464a332a2e39b57888ad19c8de86e6e0786efc1bf4f87a1bfce8037a2de153de4f2d7b7768be6d61a92489a7fad91c6fe4cbe62768faa370c192ae102fdbcd4111b0afc609b0aaa5d8845141b6316f56c861aaf6cf398ae1ef6db59903df315e1269365646082c2de5b336f5e62c789a762fbc1bc71d7c42f609532fca8d1bbbcd9a134def967a3136ebbb8a4e191e0542687e10ac5a21c03e356fa2c87ab9ed911bf2e1122edc88b0fd6c0e5693c9065549a9d654ccb78b809df8ae802bf90fa627838543e9605428e37d3a40b9fd8370c73e928b71a131110b3bd4821337530c1b324ff464f0de2302926805a76a515b4418f83a457834f2f5f243565d0bae156a8077a4e3e65a2e9cb17c0d91d3c6c1a2b9610a77ee3a46382b934e89911fbfef28f2be5bae97b77438652e7d134e56a2204a8c2e8f673ea482edc49546bbfa36bc4914174a6e06ce97a22bf03527e00dc8e22d40862045b5b019ef7dacfdd3b1f107e51c444eb5893b942a8001fdf34edf625f41a97b5d50a8a913f3f1b909387c6d97e718f18d4a017f672ba762fc2a389d3a608040feabb05ae6c6770a6d1ff9eda8ac4ab70369155f71daa286bb8b89b80782c795eca5c3c3b2da1f4f3cb007ac23e600edb29e3c910ac44a47d8e118a9e1096c859b3f6609d1eae77dbc8057b518b2b2b1b02dcce11872987493c58da32b59d1ad9f2c339c5a20bef1b4da521c88662b27a68a8405fdcc1e4dc0ec7081020207a57e0781b33a2a402793291f8d5b561b56e7e2bc31d1354dfb030726bb80de590f21728fcd1c00de95daf0aefce5a1cdd24410dba86e0085d95a798f3d490a1a9083905cf9f9b1698b622327e72be2c91ecd6f7e8e90c66e255ccfcde5f05f283136b90369758e5e412b6eb64820bca3429fe6f8a3823063e674ff6fd5683b67da942b5a315b247cc923abe0424de50668c54ffd668c461d3f7c0806b917239e2a24c902292eb328b4eff1d1cfc023b0bd5923aba9f03b64956ee8dbceb9903906e715cdf71e167007e1ec3f08406b3aa36146b9b422ffe029d63aa0f40f3a72e0e72fd0856bd260398086b69fd1f7d282aafb2a8a302337043b6ea0b6e93ff1bbc5af290431f6dbb4654471b46a62562088eb41c26d27adc0fec1cbaaff0c872c6213c73e4508984a1635571b1071bc8c01c3da8574766229d9e3e8e9326de6c0d84664320579beab33eaf124213f54393d451c6a9bcd883b3e2b84226f1a1d0f46f902bd1831e61e1485c27c41aef6dfb56f1e31d698cca4f34bb93276a013e1f722d4cd38c8fc5e1d213873fca2a97ea92bcd8621905c6cc6ec9e1d82d4055c1e8559dcd43933f0f16d0febc55b7253b3606d3ca930a12bf3cf542111699f0e0df1cccfadf1e47dcddb4663b5c291b640f8952522c5896c222a797968d0ac395f11a1a07aaa0a4d39c01849a059f18659fc8f42600e592bb50a4ebe22a98dcf386eceed544f6263c4330ad49cfa2da459f23033d87c3eb4a58dfe62cdd6e7e15ffef513bd54956a514686d46db1be475a2f04dfb0dd7d2c1f93e87264e22f5ba8455034b6237827043c00615f5d859d4b5c5c520e13b77f97a46bf32628d4c240bef85684dbf51b644da8ef887a6104f1f32ad3f2563ce9253b31435aaaae2852353c3a42a52e97a5a2389ee4448267f2c2db32cdce9256c7ac6e818e07332d1ef625c7379b1bbe8ffed3b9f05be2d2bb9d13faa3325e90c0cf53004afd9ca90cc6c9d2bb0781cc9aba0774edb4ac3ee506a54f0001d8596d3db0ae9f2dad25d1ab29f059af8ebd18026cc75e7f3971794c882de697d9765540893f7d4e74165f5c25bdf598c3391d96da0ed1d356d6e2e418bf18c8d4c14c9001c464c60114ca17f95e5a48742090d4863ece088a593819a318139d8e7b94f24a961ed09295672ab460a221070db2c633ba6a4774ca56d2cf8067ed37a385b4e2e9a141194b3c74608e48d9c82cc40958d6558c596dbd8281657e32ace3ed2ff8a7ec0f96d328c9316fec8aa0432e7c4651b51726bfec3ccaa0b0b4df088b8e8b6afcdb055aae6704d0bc7c69c631c8c08fb0e24060722b60b194bfc649da141132c41d6b29cbbe5a2c2c89507326834ba4bf31dd52182b08a07b87bc751843ec8e250196a361b9c3ee07fc5fe58aa5b1ad51489c5651af314b80a60c4599a62fff9b63db47f6c3295c672a88dad3652c5e9aef923786bc88ceeea6b4c6f871c7eb6870e164d8afb3b6a10d36a2ac92f3c786f67c420d6f3d1c13e3b4964b1a5dff0f6a31e97ad9ba2db21deac84bbd4bfae00066fc91f67d247f0b4ccc17f1745663f806bd2915b023dfca50fbe690898fe3dee5634d7ca838fa879e7daab26c16bd4d7db95ca2a63eba139cfe3a63f45659aa56f1023d98f24d69b6bfe706febb43d472df054c7180d428dbd3449befdac8826840a6fab902e473fbf16aadbbf6b895b4911f6a81e59d89db2a978303a9bd35126d2cf6925c72597275ae57c6a65f6d6a2f9754654b55aa2f521740e2d0c2a76999763cfc91acaa432781e9273fb49465ab4c776668d69c549c347d60104b8e3686e50acdcc9ec5bb599a3665674c3788aefe509f43d660735f710ff6a5a014bfc66b7deeb3c88956a3d05d4182e5342c5dfd275f86cb9290cca8b7e1ac7e38dbab25f2f7a0b59b844008c4ecb9396426c648b7a472bd32346a52f1f05629cadef99131d4d8fcb49bad8bf854ee55e4e3bf7b36cb02817eb82f5230e12a1f37a6a5c2ffcab9dc389f31e074fa0336fc3fce1bc69e4b13546769862ab15902b89ec9a1c4dcd97e0bdc61982785911bd1dda4b5178901ecbca0b00ac384117301f3622390dff0284a7dc84a802affa954184b266e567ee712ac90e1f4b98bbd761d465c520515f024a2aae0a2bbefabc80217f07b0db90e166084e05278e82204f4e7d6bd38fb289ce63eb055a0342db6b802453f26ea55ff38d1dcd5db14a91989a0d9f6f10acb82d58b936d8e1ba746b811803f6bf6a0287ee149920a92cb718a7dfd2e72d02cd7e83a72c8a77d004980d27e5f5f6ecb4e6667a5251387a8db9bbd72d186831971f93cdc1aed68d70b2fa79944f885d6336738308fbfebe4d236e11eb852def646150349a02fe0945111117f8d1d8cc7b6f0daef3c6fea13ade8d1b498eb1d5660108f5afa7125511965c7ef61f8bca3cf07b2f211b7696001451b116d4083997b2a4b6266ea316ef0bb4014c9df9a13b538a83c4ed6849a00451a78cf5093e89dd28397e0bffd6020551282cde2d93edc07e746c08d84620408b912b97df23d0a17db22ac59217dd6a614425892d67503c77dc1b3ff6d694013d4f8e79ba943d864d739a37c2a72033910f53f4246a4eae4fccc763e40c310e02e4e8cc108a0f35000ca60d1cf27312cd6f55397597c81742ca7d2e8f30b46c065dd3c1bfe247698009e0a9c5fbf318a9a0e02156ce38cc17a4cc2b09d7d86d19b2587f8b10f2cd7479572129510112024186e4f1e718712bdbb2b4c9e296ffc4714772dd3185bf709afdbe5a94e4a643189590ba84f9ada63815b50aae020030709b43af5613f6c83bb47001d4e43c0b051dc7fd1f251aa7c7c4391097905968e4fdf83abd2a2f7292d36521d70d9ce60d1171a73e84ff758ae5939b2a5fefa06e76fa750e50b3d901ecc61a9664fb8cdc0abcb6aaeddba12aea6cdcc236138c9b52258bb20e2cc020dfcb3a8b1718b4a434f6672bbe06956dbe32f39a09f599572fa45426b4795c5af8855da08c538e0995c35df2f017840534358f3d42c1903843e4ecff652c02472580716b9b34915a5041661ed6d5864d6792f457938d26480ff1cd0ffc90864d7daee67d4359861ca918ea8e97e1e10d99014de16aa9f1d529b4e7be669c1858662a85cd7aa326a9663d5e9218eb39c3eb3638e84e9f7e7131fec252a48c7a67e6eb427b61fd7ac4bf24a0128d877ad036b22f4ef7534ef68a4bb66180754e42cac34255a9a17160b6d5c5b52d37de6559d1065bb69ab82f9cc2460e408df52532f7e9adc1bc6d968e01c4b2fecce3fa1d625c1baab5aca2b012f64d5d9191c8988e82ccceeb14d9384bc6c70699af840e4714da8f69c0409a3e34f108e7401378bd08f6a05b1ec6355c3841e733edc963d0cc7ee117e5baa174e62d936ecaaecac64c6ca7a406b6c2714b3c3bdd081e871b57056dd98320d30ad5a4a4234821842a3a158b249c7a3d335b1cbd4b5d4db061bb188c463e6fe9b9a2fac397ed881ab6f3c1f33719460f9e4bafd6a8669587f55a393a8101fa6b2520a6fb98f51a6cb1312b01f73f5f9287ccfb1fbc314793efc31be97ab0d2444b3593df0100d1f160043060fa94d5da7c33cfd2ac5101f693a5d8546d13b8d394074a759dd1db24b366eb01f9b34ec056473fbbe6c50ada3ca6ebadf12c09d93d58d8a8c707976a1e364157b5baca69ae311b6705595501a825122536cf11d17308f0f6782b82e92f1f22777677d1b1427db9f07e7226a713e868e540ca94c0ab6b88f5c035d98f7d66307a6df4ef76571ed4083598b41aa789837f334059db4d245a69fcfde7e9c1a76e1e217db8163b3694aa3a91075377c5440b247ccb1f915a10951aa655d30e02486b1a50d33346ac9311479d22bda9f3368384705d2afb9db0dbd8ef8c15f860f56eccdb523cd244f67b82e65cad6109c4b927404f506096c88ca509aef6796d07756f9759ea2edacd74c10e9ad23f416ed952cfbd89c13b996bea04b72b7c611f7c7b1779f632262036af60bd115d9cb58a7f6be44c83a8ebcc364eacf51db807e927b6ec2d7a4fe55f23983d4a9a6d2d94a5ac4516200fb190b647231943fdceb4979686e797293528d4de8454f08ad5bc30a51394f850bd46e5a3a41e90c0a92452d65995845d6955d8bb533cec99"}], 0x1198, 0x8000}, {0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000080)}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="927353b7e3c692ff9cb576be118e073cb2acdc43e4f4b9240cb78f738f036d7dcb9bfe23666cbd9ee8487c1d4beaff2aa14e7ae990969665e3d01f83619a1c9bedaa7be42088b13ef9f4099bf149b69d3e51c81108ce331d078a14021d8bbbf995bd6623a3004086157b0dca1b8165d40118c3aabb7d11b4e1e6467308a819951db7795a42620e46bfbb4e8947573d91e0ae9508225eb056eea1d1ae47922a06992c42924a38509730f7897d861fcfa47cb5320ac7c13b38902a699a4a52b1856c3380555da9ed8b9b0f2d737b66891509cb854da00b0430ff", 0xd9}, {&(0x7f0000003680)="a15d4fef16fc3b22b96b243755aea64223ac923458e19e6c76cd50d283db53b84f790904124415aeb59eba7fa9e25e82807eb7c4995180cb59a8d4f9329e41737dfccae8e8a0458c4c6c86a13cb3674bc665724620d249a0e3f0b57846c3e50431922b03ee1d11560e1ff928bd23d60ef2616290bf9ec997321f0b6f191d515cf3e110336b0e7ccf6490b80fe2fac7bb9ec6409ac16129a5ff3cb2b1f233a5cfc45cd5605917144abca892dd0e6f1dfba0aa7483c7882615d780c5208156ec7c2780c948f1eacc3078f7e5e0867f1467f8ad06fd1bdbf8f98c7ca7c461939a62f6afafe2d446485bd5ac3e736b53126afe7c3067eae7c53f6c", 0xf9}], 0x5, &(0x7f0000003800)=[@iv={0x90, 0x117, 0x2, 0x75, "eba889ea3ff4041f2e2dac6b44e678118be09a07f8d930f26761c99efa1e9520caf09e7528b646720a51fd401db54acab3f80ecf30590106e683fd12c66dc0beca31fcf835171679f16c83c0003bb1f9e08251d5bcaa2411769c8c081968e8917830c43ae4b9def5fc028996ad903e63db967622cc"}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18}, @iv={0x28, 0x117, 0x2, 0x13, "56ad5dc51ea7248fdc63ebfb1dc3df475261c3"}], 0x100, 0x8004}, {0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003900)="c0858f11bddb9bf96f50f1b9c48776afd301a4e0520d75ae2df37e96bc45612e436d469d88bebf158bf2dec5de1d089abafcd4ffab", 0x35}, {&(0x7f0000003940)="9a8131f3b4a79cbb81fe9cf9cc02bc406f5db6e35c83b0fb98f003d9e761205ab2c61a1318124d1e644208a17ae2366efff9bd42e51acbee8a0d428cdd0259e6b726591d0aa0a1251bc33da0b161cff2a812a6e9c043f2dde85139cc8c36d1481ee51505aa943c63d95664", 0x6b}, {&(0x7f00000039c0)="add59b343930bb1201019d631afc71b4bfde62aa9b3ed241ecb9e646cae1c1c45dc70f2ab524c2f892c5584a6cc9525b1a89e3f6b355a07a35112dca1a467a63aa3352994f3801bbd34783deb05532bf51456602595fb5e4066324d49fce49bff1782dbc34bb315265de7e606880c735215fde748283e5c77693c02910c4da7bcb99843be6dff94c04", 0x89}, {&(0x7f0000003a80)="9f66a8f7d7dc66e7e6bfd611891716896065b8baf6e632561ff8334e68fde527fed8ac7df5f0e63e2112b8bcdcc80fe3acab6bc4709077ae67c4879cd9d645791a88679b648d5b7b213d0c2e0cb6babb853972be89d8fa1e1f072408bc7d1e144fb94776c2628c0a085698a21738254326e60b00a1245b89e39136117f232919c30007233a1e4b86dcc21bfa060621cb91c668b59a38f0ed8a3546cb1b1cac4da8947fbbe2f3e7d91b5399ebafd838639c6a0a7010645397efc224d0d43618144d175841d16af11cca4b3036d3eac0744a331533fb023f4685ab", 0xda}, {&(0x7f0000003b80)="2b759a702bd76328d90aa5ecf9f5150c43d47a62f11674c660c2ba0af9a6b2df92f868eaf4c42a6fe1673e85dc1aee501857a5386585501c67b9cad3e1dc99f1d169784d7e1a7d81675488142b3c3f8329837538bbb348776441d7f7e59a2f6bb0cab4c4ffb9e1729d84f644230ae9ca1c438b16a24726b0ef7f3941ff5b14c8c6b28fbb314d5e29245a2c12d4aec1", 0x8f}, {&(0x7f0000003c40)="ba0e1cbc03b631bf42ee65d9499eb029291c0e482c5a54eb759cfba48330e36631bb3de33d91391808c9c2dde6e8911363586fc9c29b525f490b94d6e7f136dfe9ed59f54fae8b058ec3dc968cc8972a723028a0dbb92f4a699d99566033ae8d7ca4bea006176c9f2b4d855d3238704eda71bbe8d5115dacdb8458ec", 0x7c}], 0x6, &(0x7f0000003d40)=[@iv={0x90, 0x117, 0x2, 0x7b, "31ef352a3704bfcaaff288db648e4044b54d31fdaa56760fab73dbc30d5c12ae65586e5ec17ab6778698ed36d4f707fa6a25d6968269122988c5e2fd15a50847973e0cf6af248843467da11e0189ebf500f1d4a755d8c35bddac10c32bdada789e7b857af7d96ad63d700feac2f7e3f2bf9a1e0317d765f81811e4"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x58, 0x117, 0x2, 0x44, "445b7a7a24462317bea9657a93bb99b1f49c70e155a721b612ad94d6d588d2b8bcd202523a24987d59755c80ba23d948caecb53946d5f1e99ca34d999cca2d529b95717f"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff}], 0x178, 0x800}, {0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003ec0)="abd6845cc8507dabe1db2462f27cee687f6438593bdfa1da71820d014b3611cb23073dd7c31ad4fbedd22812112012649aa16114c82aaa4e265e9551414638347b4812dc21aa2a07a629d94fde4502a7bd6bd8f749423b109e20d9d6c9efbe5efa550e72b015341efa67e600551181395c8ae5f27cecdd0c74b7356a10e3bc018f8ca2bb94c4cf3dc9ea66e2365f47f02cc12741672f487710b686bce1aa47d4b103b595589d910ff06eac99e48fa56085a740411f9e3646031116357467c6efd68c67dc6258d68e69455640c94676440e629a", 0xd3}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004000)="25f639a1eab9af4f3208caea285777f5c28353fff162d2e1cb5a4b5f3887e9717d8473bea51d5fee17f85fa1678496eb8a55299f56dbb9eb8e838e61e973143d6bbc3ecb4e68f64cbc94", 0x4a}, {&(0x7f0000004080)="0cd46d4b57cbe7b3153e1dc1b074c94a9b5e2ea1d4fca9f063398b86f8534b2ae08edfbbdee08f95aff69f58c668cb0ebd95797a2bca60daf5db27d2bbfd23e6af7e86b14e47ab8026ca80b22c472354249eeabf1fc073c137ee7332c1a22b3d72628ce0208e30dd5399ffce422a27ac27ace199ade6dfde63951e48629a6e4ea739efcf0b330cb7af185a9e9f34d01be61dd02228d52301a3a9ca2d", 0x9c}, {&(0x7f0000004140)="1bab67eef8cf45730099b841b7daf75113e33d30ab9f84e754f8249280f333be1f4da00faf1d0e", 0x27}, {&(0x7f0000004180)="99ff61287bb72e6db3f16fe6c97617b00c375c5e15e5", 0x16}, {&(0x7f00000041c0)="5952d32c9575b7caf3c5ec80325a2456983ec57ac11db050166c48a667a9b35fc976b191", 0x24}, {&(0x7f0000004200)="0b43e5595f7cbe37a245ec9b88697b18258a4c64e54481fcd6f43d86307b57b55114dcdf337d8d2af4460db6b28b651a0cbef0d6724aa6332088f568934ac4124e170773956fa5f4b1cabcc2196bb3befe8d9a862834f67d36b00bd1835b15234bb79edd0fc889d3c4a3d218540a78f02fbba9f94ad15186778a269b55a34bb75ade608373388f277d02df8d6a2d61c522c970d2be2f3702e772e1a46131ade69625b70b2113df501677d2b5d1d4ffa3554c068618c03b7ac6748ff390b1a87b398cc1c96a4475a50982baf6f2c04e3bacf19cf3376c25da07978015464f1e57f22bd692a419f6266198c1", 0xeb}, {&(0x7f0000004300)="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", 0x1000}], 0x7, &(0x7f0000005380)=[@iv={0xd0, 0x117, 0x2, 0xb5, "57ad3110b49767e81e1b6d96df6cab0e5d043ee806e51c65a2eebbf0ec6b8f8650f980b13ba2a3df379b8db59105a9ea7608026bd08c83f28fc9666699bf8acfa948d5c9cb15979089522b3bb8254ea52f8feda4d83df68217e262203c8e001639ba4497cf5f4ea71cf170881555a100d33a92ede16dacace21471cce2c6053a49ef2c5a81724e4c6be6f79b52f97449b28ed7e93cc00d6854cbc4eaf4f47248173a3dbf1c06cbd74ca595b1cf04994ce6f7506d48"}], 0xd0, 0x1}], 0x5, 0x4004040) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:09 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x303, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 16:54:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 16:54:09 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x8, 0x80) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x6, 0x4, 0xfff, 0x8, 0xffffffffffffffc1, r1}) ptrace$cont(0x9, r2, 0x0, 0x0) 16:54:09 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x3b8c3dfc45cf9699) 16:54:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337", 0x1d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:09 executing program 1: getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@ipv4={[], [], @dev}, @initdev, @dev={0xfe, 0x80, [], 0x10}, 0x0, 0x0, 0x7ff}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) ftruncate(r0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)=[&(0x7f00000001c0)='/dev/ptmx\x00', &(0x7f0000000200)='\x00', 0x0, &(0x7f00000002c0)='selinux', &(0x7f0000000300)='bond_slave_0\x00', &(0x7f0000000340)='bond_slave_0\x00', 0x0]) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) dup3(0xffffffffffffffff, r1, 0x80000) 16:54:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 677.775478] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 677.787447] FAT-fs (loop3): Filesystem has been set read-only 16:54:09 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="8cff7cf90200000053"], 0x9) [ 677.971747] SELinux: policydb string length 2 does not match expected length 8 16:54:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 678.024851] SELinux: failed to load policy [ 678.097629] SELinux: policydb string length 2 does not match expected length 8 16:54:09 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 678.204620] SELinux: failed to load policy 16:54:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337", 0x1d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:10 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100, 0x40000) connect$nfc_llcp(r2, &(0x7f0000000140)={0x27, 0x1, 0x2, 0x1, 0x6, 0x9, "3082955d6ebc3f7c89c1b48db3ed70a3084f2b4a3940df18eb3830ffb2c51f74b79e4741f730000cfbedf7db9b3bb8b36b50a0b802d0effabcbd3fa593422e", 0x5}, 0x60) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100000001, 0x101000) ioctl$TIOCSIG(r3, 0x40045436, 0x9) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:12 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:12 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(0x0) dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) wait4(r2, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x1f, r0, 0x7ff, 0x7) r3 = gettid() sched_getscheduler(r3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) r4 = open(&(0x7f0000000040)='./file0\x00', 0xa0800, 0x2972877027684316) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x100000000, 0x10001, 0x40, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) sched_getscheduler(r0) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002240)='/dev/dsp\x00', 0x121000, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000002280)=0xffffffff00000000, 0x4) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ioctl$RTC_WIE_OFF(r2, 0x7010) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) getpgid(r0) 16:54:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = eventfd(0x8) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0xd, 0x1, 0x8, 0x70bd2b, 0x25dfdbfc, {0x5, 0x0, 0x6}, [@nested={0xc, 0x17, [@typed={0x8, 0x83, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1d4248fdf4e21870}, 0x40000) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/checkreqprot\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xc0, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100000001}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x409e2e5bb7c1f035}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x8c2812b1f36be4c8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x662b29af4866138e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0xced7bc17ee89fce}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x40001) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5", 0x22) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) timer_create(0x5, &(0x7f0000000000)={0x0, 0x34, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_getoverrun(r2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:13 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5", 0x22) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 681.505813] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 681.528764] FAT-fs (loop3): Filesystem has been set read-only 16:54:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(0x0) dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337eb", 0x1e) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x8100) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@local, @empty, 0x1, 0x8, [@empty, @local, @rand_addr=0x800, @multicast1, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @empty]}, 0x30) 16:54:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5", 0x22) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1eb4811b7836d067, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@empty, @broadcast}, &(0x7f0000000180)=0xc) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x925, 0x4) tkill(0x0, 0x10) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 16:54:13 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(0x0) dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:13 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x1, 0x1fffffe) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfff, 0x1fffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000380), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x80000000000, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000980)="fe5f09beb9e7fb3965d5373d3c1098f4ca0abafe7e65b799eaa50a44331673d6c458e4a5f8b51c7b3710dc088ca5800c7b7810252656c002c1726382822a49e60c45ea9572395e8e68df67a2b232d4f7770c23af2df35a57493c70f7ec6c9e3749906d", 0x63, 0x1}], 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000140), 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x20) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x0, @pix={0x0, 0x0, 0x37303250, 0xb, 0x0, 0x8, 0xb, 0x2, 0x1, 0x6, 0x1, 0x7}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x5, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0xffff, 0x1, 0x8, 0x7fff, 0x2, 0x2, 0xd14b]}, &(0x7f0000000500)=0x100) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x101) getrandom(&(0x7f00000005c0)=""/198, 0xfffffffffffffeb0, 0x3) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000006c0)=@known='trusted.syz\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x800) ustat(0x3f, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x4, 0x2, 0x2, &(0x7f0000ff9000/0x4000)=nil, 0x9}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000200)={r3, &(0x7f0000000880)=""/197}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000840)={0x0, 0x7}, 0x8) 16:54:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:14 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:14 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:14 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0xc, 0x40) tkill(r1, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x101403, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000300)={'veth1_to_bond\x00', {0x2, 0x4e24, @remote}}) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x65fac04b7e449cae, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x40, 0x0) renameat2(r3, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00', 0x2) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x103000) epoll_wait(r6, &(0x7f00000001c0), 0x0, 0xffff) getpeername$netrom(r5, &(0x7f0000000040)={{0x3, @netrom}, [@default, @remote, @default, @null, @bcast, @remote, @null]}, &(0x7f0000000140)=0x48) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) connect$unix(r3, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ptrace$cont(0x9, r1, 0x0, 0x0) [ 682.543389] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 682.563933] FAT-fs (loop3): Filesystem has been set read-only [ 682.875299] attempt to access beyond end of device 16:54:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337eb", 0x1e) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:14 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000140)=0x627c, 0x4) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x7b23e9c1e81f8324) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) fchmodat(r2, &(0x7f0000000180)='./file0\x00', 0x80) ptrace$cont(0x9, r1, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x4002) connect$caif(r4, &(0x7f0000000040)=@rfm={0x25, 0x67, "72aadb02f33b7c6df8df2ddb999bfb62"}, 0x18) 16:54:14 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 682.919394] loop3: rw=0, want=14449, limit=112 [ 682.937648] attempt to access beyond end of device 16:54:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 682.962237] loop3: rw=0, want=14425, limit=112 16:54:14 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x9, 0x1, @thr={&(0x7f0000000140)="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", &(0x7f0000000000)="96b73b0126d0191ba2f12c624655b9b2e3931a442ed43f13d139bcd80a2402c83378538a9e"}}, &(0x7f0000000080)) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 682.987540] audit: type=1800 audit(1566320054.681:193): pid=27948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="loop3" ino=824 res=0 16:54:14 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 683.255118] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 683.272050] FAT-fs (loop3): Filesystem has been set read-only 16:54:15 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d607", 0x17) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337eb", 0x1e) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:16 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 684.352767] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 16:54:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 684.394614] FAT-fs (loop3): Filesystem has been set read-only [ 684.927083] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 684.954891] FAT-fs (loop3): Filesystem has been set read-only 16:54:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) r3 = gettid() sched_getattr(r2, &(0x7f0000000180)={0x30}, 0x30, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10) ptrace$cont(0x18, r3, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x284080, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x7, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 16:54:17 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd5", 0x1f) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x6, 0x5) r1 = gettid() r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040)) mq_notify(r2, &(0x7f0000000080)={0x0, 0x0, 0x6, @thr={&(0x7f0000000140)="5bea16d8fe487af51a52b1761ea758afefe5c49d1bf84e693be434fbd4e5b4ca381cf32591d9444da9a1f89c4fda46c85b23d90539c4ee6378d3812f02f424e62a8ead167887e48a14fa7645970e275ff024d6934646cbbb72364f770da0b0c70caa70424b29b9c350406ac40ed49d3ddbd6ac18bffdfdf90e959a0f73e2fd3e9a7d56def1697a9db7138b32e680f390b269597030be816cda57abd55e8c5dad333c18a53a0d4c279537af1ba86d07dee4f66ec16d2b", &(0x7f0000000200)="37f709f19fa6f9e089516306bd88d4d4bf1cda81ef79ec9c6e90b5d7209d66f4aa01f1288b19f0ce22bb4a82254fbed0cd9e26f4a8d3996fae0533da5de667c9fd0e8f9afdb51b7cae718fd4ec08161c8ed464ffef6f4f9f41b930725bd24094ece6a083cde546e4bc06b292196f621eb8683f40e8cfc31a4d3ac219487de25c55d335c4ee15280b63d9a5ea9894e95531322b2d7f932e21bbad195dd90e4d871b31ee8c23e84bf41ce20fd3695a98e0d47aa21c50ed68a1b4e60c2727ea31baff07ebd8a6ff2dc7988be8b2af49c8c840a56cdaf550602807ab777c2351e19464e3c3abb58018266aa55b9600d79c0ecb840d1cb3450f91c6"}}) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd5", 0x1f) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000000)={0x30, 0x5, 0x1, 0x3f, 0x3, 0x5, 0x0, 0x9}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x40000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000140)=0x1e) r2 = gettid() r3 = semget$private(0x0, 0x1, 0x70e) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000180)=""/66) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r0, 0x4d, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 16:54:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() getgroups(0x1, &(0x7f00000009c0)=[0xee00]) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x3}, [{0x2, 0x4, r2}, {0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x6, r5}, {0x2, 0x1, r6}, {0x2, 0x2, r7}, {0x2, 0x1, r8}], {0x4, 0x2}, [{0x8, 0x6, r9}, {0x8, 0x2, r10}, {0x8, 0x7, r11}, {0x8, 0x1, r12}, {0x8, 0x3, r13}], {0x10, 0xf29d14e262c63042}, {0x20, 0x2}}, 0x84, 0x3) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r14 = gettid() ptrace(0x8, r14) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000ac0)) ptrace$setopts(0x4206, r14, 0x0, 0x0) tkill(r14, 0x10) ptrace$cont(0x18, r14, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r14, 0x0, 0x0) 16:54:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337eb", 0x1e) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337eb", 0x1e) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000001c0)={0x1, 0xa, [@dev={[], 0x15}, @empty, @random="9f8eb0ad5566", @empty, @random="412bd6395fc9", @broadcast, @dev={[], 0x1c}, @random="9c66411d7fd8", @local, @local]}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @loopback, 0x1, 0x2, [@local, @dev={0xac, 0x14, 0x14, 0x13}]}, 0x18) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000080)='net/stat\x00') setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140)=0x8, 0x4) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000200)={0x5, 0x0, [], {0x0, @reserved}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1, [@multicast2]}, 0x14) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x38100, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x100, 0x2, 0x100, 0x6, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={r3, 0x4c, "94eb423ea6e668d9acbc5258ad975de8548a801732c408cac88aec0a49c9c00122b20918726c3f42b3f49e9f6f662ba639c1397b900aad52423fb7173575644a261c10928dd1bc6b9e24bfb5"}, &(0x7f0000000240)=0x54) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r3, 0x8}, &(0x7f00000002c0)=0x8) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000040)}, 0x10) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) tgkill(r0, r1, 0xb) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:18 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) get_robust_list(r1, &(0x7f0000000140)=&(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000000)}}, &(0x7f0000000180)=0x18) 16:54:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 687.285861] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 687.317813] FAT-fs (loop3): Filesystem has been set read-only 16:54:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd5", 0x1f) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:19 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) sched_getaffinity(r0, 0x8, &(0x7f0000000080)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x28280, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 16:54:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 687.533012] attempt to access beyond end of device [ 687.570425] loop4: rw=0, want=9713, limit=112 [ 687.597923] attempt to access beyond end of device 16:54:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0), 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 687.636801] loop4: rw=0, want=9689, limit=112 [ 687.654373] audit: type=1800 audit(1566320059.361:194): pid=28154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.4" name="bus" dev="loop4" ino=844 res=0 [ 687.880717] attempt to access beyond end of device [ 687.907159] loop2: rw=0, want=17969, limit=112 [ 687.947497] attempt to access beyond end of device [ 687.972342] loop2: rw=0, want=17945, limit=112 16:54:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 687.997485] audit: type=1800 audit(1566320059.701:195): pid=28175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.2" name="bus" dev="loop2" ino=848 res=0 16:54:19 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(0x0, 0x141042, 0x0) 16:54:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:20 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:20 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 688.435766] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 688.472652] FAT-fs (loop3): Filesystem has been set read-only 16:54:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(0x0, 0x141042, 0x0) 16:54:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd5", 0x1f) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 689.283688] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 689.296535] FAT-fs (loop3): Filesystem has been set read-only 16:54:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x25a100, 0x2) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x5]}) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000140)="a97408d2db4c818a60802361119bf83314189ed04f856c2f4ad64a297b0a462927872d96338f791ae05c08fed2dfc433347909d1da58eb10ed38289a43efd192756bb80d53955332f38fcedd67097828ef4541c5aa86878abe6845ca8afc5db07487e77d124e534ab5a9e9b36c1b4b4fcaa8d8f9545cc9d667684f8e5a6509455171e9dbacddc57d36c259850f77350e3537ccbae48c97775fd4bc91ad85bd687f8d1b94160c40004257228a87109f49cf09cde0ce22b87fa0a652db564a4bffcece752660d23eb0f2339a15b70bc55668aec498b114235b8a13fbc5965e74309e259f530c94a32ce9b9b9c15e") ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:22 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(0x0, 0x141042, 0x0) 16:54:22 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(0x0, 0x141042, 0x0) 16:54:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_out(r2, 0x5460, &(0x7f0000000040)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x2000000000000000, &(0x7f0000000000)="960bae4c1b537c6ace29e12e751e83c77c685b348c20b65af60b9f80c5edbf5eb98d921975bcd7fbd20073bda4fd723ce1cafda30000000000") ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(0x0, 0x141042, 0x0) 16:54:22 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$cont(0x1f, r0, 0x10001, 0xffffffffffff0325) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x20, r1, 0x5, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:22 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(0x0) r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:23 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 691.370687] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 16:54:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(0x0, 0x141042, 0x0) 16:54:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(0x0, 0x141042, 0x0) [ 691.412260] FAT-fs (loop3): Filesystem has been set read-only 16:54:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 16:54:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, 0x0) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) [ 692.484024] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 692.502806] FAT-fs (loop3): Filesystem has been set read-only 16:54:25 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ioctl(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007051dfffd946f6105000200000a1f0000070a2808000800050004001200280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, 0x0) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:25 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 16:54:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 16:54:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) [ 694.095300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 694.169148] attempt to access beyond end of device 16:54:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 16:54:25 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0xfffffffffffffff7, 0x401, 0x472, 0x6}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 694.216294] loop3: rw=0, want=6577, limit=112 [ 694.233531] attempt to access beyond end of device [ 694.325948] loop3: rw=0, want=6553, limit=112 16:54:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, 0x0) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 694.348441] audit: type=1800 audit(1566320066.051:196): pid=28367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="loop3" ino=863 res=0 16:54:26 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) ptrace$setregs(0xf, r2, 0x0, &(0x7f0000000140)="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") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @multicast2}, &(0x7f0000000080)=0xc) bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, r4}, 0xc) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:26 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x8) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000)="22aaf89d84932f82626f7420f593bb77c7f2ad7f991fecfd0baac8cc5d61aee10fe42d6c6b747266eef19f42d32f6508c0d8b2355d0589f3bd5820dea4468bdb7725000000989d0b0c088c432fb99bf3094811b927") ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000140)="588b7f73a03284aaed2200b3af8097307f4dac091bdf9e32b07873ddf788073655a6602730bcb612a2d618e2206c7d073f549210fac330ab271ce6d92805df59b65477456fa8cc052305cf5b491adfa7ef1bfad5baedc349a8aad4002d65f70b90a037aef108afa308b5b5f91603a538da8fad145eed73") 16:54:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:26 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) bind(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7379737f000000000000006a6563745f723a12bedc9e000000006f6e743020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73303d73303a63302e6331303233203138343436373434303733373039353531363133202e2f66696c65300000000000040000"], 0x71) listen(r1, 0xffffffff) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r3, 0x0, 0x800000bf) clone(0x200c200, 0x0, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000040)=0x4) r5 = geteuid() r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r6, 0x69d6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchown(r4, r5, r7) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000000c0)) r9 = gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r9) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) [ 694.925475] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 694.947446] FAT-fs (loop3): Filesystem has been set read-only 16:54:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) bind(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7379737f000000000000006a6563745f723a12bedc9e000000006f6e743020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73303d73303a63302e6331303233203138343436373434303733373039353531363133202e2f66696c65300000000000040000"], 0x71) listen(r1, 0xffffffff) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r3, 0x0, 0x800000bf) clone(0x200c200, 0x0, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000040)=0x4) r5 = geteuid() r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r6, 0x69d6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchown(r4, r5, r7) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000000c0)) r9 = gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r9) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) 16:54:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 16:54:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:27 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(0x0, 0x141042, 0x0) [ 695.554527] attempt to access beyond end of device [ 695.570157] loop4: rw=0, want=25713, limit=112 [ 695.585005] attempt to access beyond end of device [ 695.596921] loop4: rw=0, want=25689, limit=112 [ 695.616227] audit: type=1800 audit(1566320067.321:197): pid=28448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.4" name="bus" dev="loop4" ino=868 res=0 16:54:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) bind(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7379737f000000000000006a6563745f723a12bedc9e000000006f6e743020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73303d73303a63302e6331303233203138343436373434303733373039353531363133202e2f66696c65300000000000040000"], 0x71) listen(r1, 0xffffffff) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') sendfile(r0, r3, 0x0, 0x800000bf) clone(0x200c200, 0x0, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000040)=0x4) r5 = geteuid() r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r6, 0x69d6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) fchown(r4, r5, r7) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000000c0)) r9 = gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, r9) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff) 16:54:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 16:54:27 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:27 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(0x0, 0x141042, 0x0) [ 696.109625] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 696.152778] FAT-fs (loop3): Filesystem has been set read-only 16:54:29 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x501000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x6, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1000, 0x8, 0x8, 0x3, 0x9ff8, 0x3f, 0x0, 0x7, 0x7f, 0x1, 0x8, 0x4, 0x43, 0x8001, 0x8, 0x9, 0x4, 0x61, 0x0, 0x9, 0x1, 0x76, 0xfffffffffffff695, 0xfffffffffffffff8, 0x3, 0x0, 0x400, 0x5, 0x2a, 0x8, 0x0, 0x2, 0x3, @perf_config_ext={0x7, 0x9}, 0x4280, 0xa6f, 0x6, 0x3, 0xffffffffffff0001, 0x1f4, 0x7f}, r0, 0xb, r1, 0x2) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) ptrace$cont(0x60374b92ba42f7cf, r0, 0x3, 0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000140)) 16:54:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:29 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(0x0, 0x141042, 0x0) 16:54:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55db3d5917a19afd69cb6fdebe8ee", 0x2d) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:29 executing program 1 (fault-call:29 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:29 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) sched_rr_get_interval(r0, &(0x7f0000000000)) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0xdaac, 0x9, 0x7a, 0x4, 0x6}) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r3, 0x6}}, 0x10) [ 697.857143] FAULT_INJECTION: forcing a failure. [ 697.857143] name failslab, interval 1, probability 0, space 0, times 0 [ 697.926278] CPU: 0 PID: 28489 Comm: syz-executor.1 Not tainted 4.14.139 #35 [ 697.933424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.942782] Call Trace: [ 697.945376] dump_stack+0x138/0x19c [ 697.949011] should_fail.cold+0x10f/0x159 [ 697.953170] should_failslab+0xdb/0x130 [ 697.957159] kmem_cache_alloc+0x2d7/0x780 [ 697.961311] ? lock_downgrade+0x6e0/0x6e0 [ 697.965469] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 697.970229] getname_flags+0xcb/0x580 [ 697.974029] ? retint_kernel+0x2d/0x2d [ 697.977928] getname+0x1a/0x20 [ 697.981130] do_sys_open+0x1e7/0x430 [ 697.984847] ? filp_open+0x70/0x70 [ 697.988393] SyS_open+0x2d/0x40 [ 697.991674] ? do_sys_open+0x430/0x430 [ 697.995565] do_syscall_64+0x1e8/0x640 [ 697.999451] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 698.004300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 698.009483] RIP: 0033:0x459829 [ 698.012668] RSP: 002b:00007fbb56f10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 16:54:29 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9d, 0x400) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r0}) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000080)=0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) gettid() ptrace$cont(0x9, r1, 0x0, 0x0) [ 698.020367] RAX: ffffffffffffffda RBX: 00007fbb56f10c90 RCX: 0000000000459829 [ 698.020374] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 [ 698.020379] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 698.020385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb56f116d4 [ 698.020392] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 000000000000000c 16:54:29 executing program 2 (fault-call:17 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:29 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x24040, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002500)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000040)) ptrace$cont(0x9, r1, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) 16:54:29 executing program 5 (fault-call:7 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$vcsa(0x0, 0x0, 0x640000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) sendto$inet6(r0, &(0x7f0000000300)="0503080108003e0000001140c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfef0, 0x80, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) munlockall() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) getpgid(r4) 16:54:30 executing program 1 (fault-call:29 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x4, 0x7e6}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 698.408081] FAULT_INJECTION: forcing a failure. [ 698.408081] name failslab, interval 1, probability 0, space 0, times 0 [ 698.483834] CPU: 1 PID: 28536 Comm: syz-executor.5 Not tainted 4.14.139 #35 [ 698.490979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.493600] FAULT_INJECTION: forcing a failure. [ 698.493600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 698.500335] Call Trace: [ 698.514698] dump_stack+0x138/0x19c [ 698.518321] should_fail.cold+0x10f/0x159 [ 698.522461] should_failslab+0xdb/0x130 [ 698.526423] kmem_cache_alloc_node+0x287/0x780 [ 698.530991] ? process_measurement+0x58a/0xb80 [ 698.535566] __alloc_skb+0x9c/0x500 [ 698.539183] ? skb_scrub_packet+0x4b0/0x4b0 [ 698.543505] alloc_skb_with_frags+0x86/0x4b0 [ 698.547911] ? __might_fault+0x110/0x1d0 [ 698.551967] ? find_held_lock+0x35/0x130 [ 698.556024] sock_alloc_send_pskb+0x5db/0x740 [ 698.560511] ? iov_iter_advance+0x218/0xc60 [ 698.564830] ? sock_wmalloc+0xf0/0xf0 [ 698.568628] ? _copy_from_iter_full+0x1c6/0x6c0 [ 698.573297] packet_sendmsg+0x15f4/0x5a10 [ 698.577439] ? avc_has_perm_noaudit+0x420/0x420 [ 698.582103] ? save_trace+0x290/0x290 [ 698.585895] ? trace_hardirqs_on+0x10/0x10 [ 698.590124] ? lock_downgrade+0x6e0/0x6e0 [ 698.594263] ? __fget+0x210/0x370 [ 698.597716] ? packet_notifier+0x760/0x760 [ 698.601952] ? selinux_socket_sendmsg+0x36/0x40 [ 698.606619] ? security_socket_sendmsg+0x89/0xb0 [ 698.611376] ? packet_notifier+0x760/0x760 [ 698.615604] sock_sendmsg+0xce/0x110 [ 698.619308] SYSC_sendto+0x206/0x310 [ 698.623012] ? SYSC_connect+0x2d0/0x2d0 [ 698.626983] ? lock_downgrade+0x6e0/0x6e0 [ 698.631132] ? wait_for_completion+0x420/0x420 [ 698.635707] ? __sb_end_write+0xc1/0x100 [ 698.639762] ? fput+0xd4/0x150 [ 698.642946] ? SyS_write+0x15e/0x230 [ 698.646655] SyS_sendto+0x40/0x50 [ 698.650097] ? SyS_getpeername+0x30/0x30 [ 698.654149] do_syscall_64+0x1e8/0x640 [ 698.658024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 698.662862] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 698.668041] RIP: 0033:0x459829 [ 698.671222] RSP: 002b:00007f534e375c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 698.678930] RAX: ffffffffffffffda RBX: 00007f534e375c90 RCX: 0000000000459829 [ 698.686189] RDX: 000000000000fef0 RSI: 0000000020000300 RDI: 0000000000000003 [ 698.693451] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 698.700711] R10: 0000000000000080 R11: 0000000000000246 R12: 00007f534e3766d4 [ 698.707968] R13: 00000000004c77e7 R14: 00000000004dd068 R15: 0000000000000005 [ 698.715250] CPU: 0 PID: 28534 Comm: syz-executor.1 Not tainted 4.14.139 #35 [ 698.722352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.722356] Call Trace: [ 698.722371] dump_stack+0x138/0x19c [ 698.722386] should_fail.cold+0x10f/0x159 [ 698.722401] __alloc_pages_nodemask+0x1d6/0x7a0 [ 698.746702] ? fs_reclaim_acquire+0x20/0x20 [ 698.751032] ? __alloc_pages_slowpath+0x2930/0x2930 [ 698.756055] cache_grow_begin+0x80/0x400 [ 698.760103] kmem_cache_alloc+0x6a6/0x780 [ 698.764233] ? lock_downgrade+0x6e0/0x6e0 [ 698.768365] getname_flags+0xcb/0x580 [ 698.772149] getname+0x1a/0x20 [ 698.775326] do_sys_open+0x1e7/0x430 [ 698.779022] ? filp_open+0x70/0x70 [ 698.782557] SyS_open+0x2d/0x40 [ 698.785818] ? do_sys_open+0x430/0x430 [ 698.789694] do_syscall_64+0x1e8/0x640 [ 698.793564] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 698.798394] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 698.803566] RIP: 0033:0x459829 [ 698.806739] RSP: 002b:00007fbb56f10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 698.814432] RAX: ffffffffffffffda RBX: 00007fbb56f10c90 RCX: 0000000000459829 [ 698.821688] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 [ 698.828943] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 698.836227] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb56f116d4 [ 698.843485] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 000000000000000c [ 698.857596] FAULT_INJECTION: forcing a failure. [ 698.857596] name failslab, interval 1, probability 0, space 0, times 0 [ 698.869573] CPU: 1 PID: 28545 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 698.876685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.886035] Call Trace: [ 698.888622] dump_stack+0x138/0x19c [ 698.892288] should_fail.cold+0x10f/0x159 [ 698.896443] should_failslab+0xdb/0x130 [ 698.900422] kmem_cache_alloc+0x2d7/0x780 [ 698.904576] ? lock_downgrade+0x6e0/0x6e0 [ 698.908730] getname_flags+0xcb/0x580 [ 698.912528] getname+0x1a/0x20 [ 698.915734] do_sys_open+0x1e7/0x430 [ 698.919539] ? filp_open+0x70/0x70 [ 698.923083] SyS_open+0x2d/0x40 [ 698.926364] ? do_sys_open+0x430/0x430 [ 698.930253] do_syscall_64+0x1e8/0x640 [ 698.934140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 698.938989] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 698.944177] RIP: 0033:0x459829 [ 698.947368] RSP: 002b:00007f94b8e28c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 698.955073] RAX: ffffffffffffffda RBX: 00007f94b8e28c90 RCX: 0000000000459829 [ 698.962341] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 [ 698.969615] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 698.976885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f94b8e296d4 [ 698.984156] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 000000000000000a [ 699.001084] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 16:54:30 executing program 4: socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) sendto$isdn(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x52, 0x800, &(0x7f00000000c0)={0x22, 0xdecb, 0x6, 0xff, 0x80000000}, 0x6) 16:54:30 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 16:54:30 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)=""/242, 0xf2) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x35) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000, 0x52013dae268a68b2) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000140)) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 16:54:30 executing program 5 (fault-call:7 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$vcsa(0x0, 0x0, 0x640000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) sendto$inet6(r0, &(0x7f0000000300)="0503080108003e0000001140c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfef0, 0x80, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) munlockall() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) getpgid(r4) [ 699.024221] FAT-fs (loop3): Filesystem has been set read-only [ 699.126355] FAULT_INJECTION: forcing a failure. [ 699.126355] name failslab, interval 1, probability 0, space 0, times 0 16:54:30 executing program 1 (fault-call:29 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 699.205732] CPU: 1 PID: 28554 Comm: syz-executor.5 Not tainted 4.14.139 #35 [ 699.213281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.222638] Call Trace: [ 699.225234] dump_stack+0x138/0x19c [ 699.228902] should_fail.cold+0x10f/0x159 [ 699.233095] should_failslab+0xdb/0x130 [ 699.242809] kmem_cache_alloc_node_trace+0x280/0x770 [ 699.247916] ? rcu_lockdep_current_cpu_online+0xf2/0x140 16:54:31 executing program 2 (fault-call:17 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 699.253374] __kmalloc_node_track_caller+0x3d/0x80 [ 699.258310] __kmalloc_reserve.isra.0+0x40/0xe0 [ 699.262985] __alloc_skb+0xcf/0x500 [ 699.266606] ? skb_scrub_packet+0x4b0/0x4b0 [ 699.270926] alloc_skb_with_frags+0x86/0x4b0 [ 699.275331] ? __might_fault+0x110/0x1d0 [ 699.279396] ? find_held_lock+0x35/0x130 [ 699.283461] sock_alloc_send_pskb+0x5db/0x740 [ 699.287954] ? iov_iter_advance+0x218/0xc60 [ 699.292279] ? sock_wmalloc+0xf0/0xf0 [ 699.296083] ? _copy_from_iter_full+0x1c6/0x6c0 [ 699.300760] packet_sendmsg+0x15f4/0x5a10 [ 699.304909] ? avc_has_perm_noaudit+0x420/0x420 [ 699.309582] ? save_trace+0x290/0x290 [ 699.313378] ? trace_hardirqs_on+0x10/0x10 [ 699.317615] ? lock_downgrade+0x6e0/0x6e0 [ 699.321759] ? __fget+0x210/0x370 [ 699.321784] ? packet_notifier+0x760/0x760 [ 699.321804] ? selinux_socket_sendmsg+0x36/0x40 [ 699.321818] ? security_socket_sendmsg+0x89/0xb0 [ 699.329479] ? packet_notifier+0x760/0x760 [ 699.329494] sock_sendmsg+0xce/0x110 [ 699.329505] SYSC_sendto+0x206/0x310 [ 699.329514] ? SYSC_connect+0x2d0/0x2d0 [ 699.329527] ? lock_downgrade+0x6e0/0x6e0 [ 699.346850] ? wait_for_completion+0x420/0x420 [ 699.346862] ? __sb_end_write+0xc1/0x100 [ 699.346874] ? fput+0xd4/0x150 [ 699.346884] ? SyS_write+0x15e/0x230 [ 699.354537] SyS_sendto+0x40/0x50 [ 699.354547] ? SyS_getpeername+0x30/0x30 [ 699.354560] do_syscall_64+0x1e8/0x640 [ 699.354568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 699.354584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 699.396132] RIP: 0033:0x459829 16:54:31 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) [ 699.399324] RSP: 002b:00007f534e375c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 699.407032] RAX: ffffffffffffffda RBX: 00007f534e375c90 RCX: 0000000000459829 [ 699.414303] RDX: 000000000000fef0 RSI: 0000000020000300 RDI: 0000000000000003 [ 699.421579] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 699.424711] FAULT_INJECTION: forcing a failure. [ 699.424711] name failslab, interval 1, probability 0, space 0, times 0 [ 699.428842] R10: 0000000000000080 R11: 0000000000000246 R12: 00007f534e3766d4 [ 699.428849] R13: 00000000004c77e7 R14: 00000000004dd068 R15: 0000000000000005 16:54:31 executing program 5 (fault-call:7 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$vcsa(0x0, 0x0, 0x640000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) sendto$inet6(r0, &(0x7f0000000300)="0503080108003e0000001140c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfef0, 0x80, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) munlockall() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) getpgid(r4) [ 699.464469] CPU: 0 PID: 28569 Comm: syz-executor.1 Not tainted 4.14.139 #35 [ 699.471579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.480926] Call Trace: [ 699.483504] dump_stack+0x138/0x19c [ 699.487114] should_fail.cold+0x10f/0x159 [ 699.491245] should_failslab+0xdb/0x130 [ 699.495203] kmem_cache_alloc+0x2d7/0x780 [ 699.499339] ? save_stack+0xa9/0xd0 [ 699.502961] get_empty_filp+0x8c/0x3f0 [ 699.506834] path_openat+0x8f/0x3f70 [ 699.510538] ? trace_hardirqs_on+0x10/0x10 [ 699.514766] ? check_preemption_disabled+0x3c/0x250 [ 699.519768] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 699.524421] ? find_held_lock+0x35/0x130 [ 699.528467] ? save_trace+0x290/0x290 [ 699.532257] ? __alloc_fd+0x1d4/0x4a0 [ 699.536040] do_filp_open+0x18e/0x250 [ 699.539825] ? may_open_dev+0xe0/0xe0 [ 699.543671] ? lock_downgrade+0x6e0/0x6e0 [ 699.547803] ? _raw_spin_unlock+0x2d/0x50 [ 699.551933] ? __alloc_fd+0x1d4/0x4a0 [ 699.555720] do_sys_open+0x2c5/0x430 [ 699.559416] ? filp_open+0x70/0x70 [ 699.562940] SyS_open+0x2d/0x40 [ 699.566200] ? do_sys_open+0x430/0x430 [ 699.570071] do_syscall_64+0x1e8/0x640 [ 699.573940] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 699.578771] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 699.583941] RIP: 0033:0x459829 [ 699.587111] RSP: 002b:00007fbb56f10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 699.594798] RAX: ffffffffffffffda RBX: 00007fbb56f10c90 RCX: 0000000000459829 [ 699.602095] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 16:54:31 executing program 1 (fault-call:29 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000040)="0f20e06635000001000f22e0660f71d300dadec4c3c5cf600b010500002e660f388209677d00640f1a070f01df65670fc79b00580000", 0x36}], 0xaaaaaaaaaaaaa1d, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mlock(&(0x7f0000000000/0x1000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x1) sendto$packet(r3, &(0x7f0000000180)="95e1ec9bcdcdec6685c1412d07333856a9acc7e9fa17df5755fce334b766c6216054f92f7194a54dcbfdf9754dafeccc77355b5b174c67a5", 0x38, 0x40000, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000280)=""/245) accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @default, @remote, @rose, @netrom, @rose, @default]}, &(0x7f0000000140)=0x48) [ 699.609349] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 699.616597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb56f116d4 [ 699.623845] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 000000000000000c [ 699.774747] FAULT_INJECTION: forcing a failure. [ 699.774747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 699.834609] CPU: 1 PID: 28582 Comm: syz-executor.5 Not tainted 4.14.139 #35 [ 699.841743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.841749] Call Trace: [ 699.841767] dump_stack+0x138/0x19c [ 699.841786] should_fail.cold+0x10f/0x159 [ 699.841797] ? __might_sleep+0x93/0xb0 [ 699.841814] __alloc_pages_nodemask+0x1d6/0x7a0 [ 699.841831] ? __alloc_pages_slowpath+0x2930/0x2930 [ 699.841847] ? __alloc_skb+0x3ee/0x500 [ 699.841861] alloc_pages_current+0xec/0x1e0 [ 699.841873] alloc_skb_with_frags+0x179/0x4b0 [ 699.841883] ? __might_fault+0x110/0x1d0 [ 699.841898] sock_alloc_send_pskb+0x5db/0x740 [ 699.841916] ? iov_iter_advance+0x218/0xc60 [ 699.841928] ? sock_wmalloc+0xf0/0xf0 [ 699.879307] ? _copy_from_iter_full+0x1c6/0x6c0 [ 699.879326] packet_sendmsg+0x15f4/0x5a10 [ 699.879341] ? avc_has_perm_noaudit+0x420/0x420 [ 699.918200] ? save_trace+0x290/0x290 [ 699.922005] ? trace_hardirqs_on+0x10/0x10 [ 699.926242] ? lock_downgrade+0x6e0/0x6e0 [ 699.930398] ? __fget+0x210/0x370 [ 699.933868] ? packet_notifier+0x760/0x760 [ 699.938120] ? selinux_socket_sendmsg+0x36/0x40 [ 699.942775] ? security_socket_sendmsg+0x89/0xb0 [ 699.947604] ? packet_notifier+0x760/0x760 [ 699.951824] sock_sendmsg+0xce/0x110 [ 699.955523] SYSC_sendto+0x206/0x310 [ 699.959217] ? SYSC_connect+0x2d0/0x2d0 [ 699.963176] ? lock_downgrade+0x6e0/0x6e0 [ 699.967316] ? wait_for_completion+0x420/0x420 [ 699.971881] ? __sb_end_write+0xc1/0x100 [ 699.975924] ? fput+0xd4/0x150 [ 699.979097] ? SyS_write+0x15e/0x230 [ 699.982792] SyS_sendto+0x40/0x50 [ 699.986222] ? SyS_getpeername+0x30/0x30 [ 699.990263] do_syscall_64+0x1e8/0x640 [ 699.994131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 699.998955] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 700.004125] RIP: 0033:0x459829 [ 700.007299] RSP: 002b:00007f534e375c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 700.014989] RAX: ffffffffffffffda RBX: 00007f534e375c90 RCX: 0000000000459829 [ 700.022237] RDX: 000000000000fef0 RSI: 0000000020000300 RDI: 0000000000000003 [ 700.029486] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 700.036734] R10: 0000000000000080 R11: 0000000000000246 R12: 00007f534e3766d4 [ 700.043981] R13: 00000000004c77e7 R14: 00000000004dd068 R15: 0000000000000005 [ 700.097584] FAULT_INJECTION: forcing a failure. [ 700.097584] name failslab, interval 1, probability 0, space 0, times 0 [ 700.123768] FAULT_INJECTION: forcing a failure. [ 700.123768] name failslab, interval 1, probability 0, space 0, times 0 [ 700.135659] CPU: 1 PID: 28584 Comm: syz-executor.1 Not tainted 4.14.139 #35 [ 700.142774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.152126] Call Trace: [ 700.154715] dump_stack+0x138/0x19c [ 700.158349] should_fail.cold+0x10f/0x159 [ 700.162499] ? should_failslab+0xa1/0x130 [ 700.166672] should_failslab+0xdb/0x130 [ 700.171006] kmem_cache_alloc+0x2d7/0x780 [ 700.175155] ? ext4_sync_fs+0x800/0x800 [ 700.179124] ext4_alloc_inode+0x1d/0x610 [ 700.183178] alloc_inode+0x64/0x180 [ 700.186800] new_inode_pseudo+0x19/0xf0 [ 700.190765] new_inode+0x1f/0x40 [ 700.194135] __ext4_new_inode+0x32c/0x4860 [ 700.198376] ? mark_held_locks+0xb1/0x100 [ 700.202521] ? retint_kernel+0x2d/0x2d [ 700.206401] ? ext4_free_inode+0x1210/0x1210 [ 700.210804] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 700.215558] ? check_preemption_disabled+0x3c/0x250 [ 700.220580] ext4_create+0x1da/0x4f0 [ 700.224301] ? ext4_mknod+0x4f0/0x4f0 [ 700.228098] ? lookup_open+0x4e9/0x1860 [ 700.232068] ? ext4_mknod+0x4f0/0x4f0 [ 700.235865] lookup_open+0x11a6/0x1860 [ 700.239870] ? complete_walk+0x1f0/0x1f0 [ 700.243933] ? down_write+0x4a/0x90 [ 700.247556] path_openat+0xfca/0x3f70 [ 700.251356] ? get_pid_task+0x98/0x140 [ 700.255249] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 700.259919] ? save_trace+0x290/0x290 [ 700.263713] ? __alloc_fd+0x1d4/0x4a0 [ 700.267511] do_filp_open+0x18e/0x250 [ 700.271304] ? may_open_dev+0xe0/0xe0 [ 700.275106] ? _raw_spin_unlock+0x2d/0x50 [ 700.279245] ? __alloc_fd+0x1d4/0x4a0 [ 700.283055] do_sys_open+0x2c5/0x430 [ 700.286764] ? filp_open+0x70/0x70 [ 700.290298] SyS_open+0x2d/0x40 [ 700.293567] ? do_sys_open+0x430/0x430 [ 700.297452] do_syscall_64+0x1e8/0x640 [ 700.301335] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.306175] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 700.311357] RIP: 0033:0x459829 [ 700.314539] RSP: 002b:00007fbb56f10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 700.322241] RAX: ffffffffffffffda RBX: 00007fbb56f10c90 RCX: 0000000000459829 [ 700.329504] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 [ 700.336770] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 700.344036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb56f116d4 [ 700.351296] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 000000000000000c [ 700.358580] CPU: 0 PID: 28598 Comm: syz-executor.2 Not tainted 4.14.139 #35 [ 700.365679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.365683] Call Trace: [ 700.365697] dump_stack+0x138/0x19c [ 700.365715] should_fail.cold+0x10f/0x159 [ 700.365731] should_failslab+0xdb/0x130 [ 700.385859] kmem_cache_alloc+0x2d7/0x780 [ 700.393934] ? save_stack+0xa9/0xd0 [ 700.393948] get_empty_filp+0x8c/0x3f0 [ 700.393956] path_openat+0x8f/0x3f70 [ 700.393966] ? get_pid_task+0x98/0x140 [ 700.393983] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 700.393992] ? save_trace+0x290/0x290 [ 700.394004] ? __alloc_fd+0x1d4/0x4a0 [ 700.394017] do_filp_open+0x18e/0x250 [ 700.413712] ? may_open_dev+0xe0/0xe0 [ 700.413728] ? lock_downgrade+0x6e0/0x6e0 [ 700.413742] ? _raw_spin_unlock+0x2d/0x50 [ 700.421306] ? __alloc_fd+0x1d4/0x4a0 [ 700.421327] do_sys_open+0x2c5/0x430 [ 700.421339] ? filp_open+0x70/0x70 [ 700.421355] SyS_open+0x2d/0x40 [ 700.421362] ? do_sys_open+0x430/0x430 [ 700.421373] do_syscall_64+0x1e8/0x640 [ 700.421381] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.421396] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 700.469171] RIP: 0033:0x459829 [ 700.472342] RSP: 002b:00007f94b8e28c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 700.480031] RAX: ffffffffffffffda RBX: 00007f94b8e28c90 RCX: 0000000000459829 [ 700.487281] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 16:54:32 executing program 5 (fault-call:7 fault-nth:3): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$vcsa(0x0, 0x0, 0x640000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) sendto$inet6(r0, &(0x7f0000000300)="0503080108003e0000001140c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfef0, 0x80, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) munlockall() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) getpgid(r4) [ 700.494529] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 700.501776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f94b8e296d4 [ 700.509035] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 000000000000000a 16:54:32 executing program 4: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2080) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x0, 0x8, 0x800, 0x4f1c8a1f}) write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x1, 0x6}, 0xb) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40, 0x0) unshare(0x40000000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) futex(&(0x7f0000000080)=0x2, 0x8b, 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)=0x2, 0x1) sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x44810) 16:54:32 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) [ 700.619882] FAULT_INJECTION: forcing a failure. [ 700.619882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 700.649966] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 16:54:32 executing program 1 (fault-call:29 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 700.669867] CPU: 0 PID: 28603 Comm: syz-executor.5 Not tainted 4.14.139 #35 [ 700.677090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.686448] Call Trace: [ 700.689038] dump_stack+0x138/0x19c [ 700.692679] should_fail.cold+0x10f/0x159 [ 700.696910] ? __might_sleep+0x93/0xb0 [ 700.700792] __alloc_pages_nodemask+0x1d6/0x7a0 [ 700.700808] ? __alloc_pages_slowpath+0x2930/0x2930 [ 700.700824] ? __alloc_skb+0x3ee/0x500 [ 700.700838] alloc_pages_current+0xec/0x1e0 [ 700.700850] alloc_skb_with_frags+0x179/0x4b0 [ 700.700861] ? __might_fault+0x110/0x1d0 [ 700.700875] sock_alloc_send_pskb+0x5db/0x740 [ 700.716488] FAT-fs (loop3): Filesystem has been set read-only [ 700.718714] ? iov_iter_advance+0x218/0xc60 [ 700.718730] ? sock_wmalloc+0xf0/0xf0 [ 700.718746] ? _copy_from_iter_full+0x1c6/0x6c0 [ 700.745716] packet_sendmsg+0x15f4/0x5a10 [ 700.745729] ? avc_has_perm_noaudit+0x420/0x420 [ 700.745748] ? save_trace+0x290/0x290 [ 700.754524] ? trace_hardirqs_on+0x10/0x10 [ 700.754535] ? lock_downgrade+0x6e0/0x6e0 [ 700.754546] ? __fget+0x210/0x370 [ 700.754568] ? packet_notifier+0x760/0x760 [ 700.778975] ? selinux_socket_sendmsg+0x36/0x40 [ 700.783625] ? security_socket_sendmsg+0x89/0xb0 [ 700.788363] ? packet_notifier+0x760/0x760 [ 700.792579] sock_sendmsg+0xce/0x110 [ 700.796271] SYSC_sendto+0x206/0x310 [ 700.799963] ? SYSC_connect+0x2d0/0x2d0 [ 700.803916] ? lock_downgrade+0x6e0/0x6e0 [ 700.808050] ? wait_for_completion+0x420/0x420 [ 700.812611] ? __sb_end_write+0xc1/0x100 [ 700.816654] ? fput+0xd4/0x150 [ 700.819823] ? SyS_write+0x15e/0x230 [ 700.823518] SyS_sendto+0x40/0x50 [ 700.826963] ? SyS_getpeername+0x30/0x30 [ 700.831004] do_syscall_64+0x1e8/0x640 [ 700.834883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 700.839712] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 700.844881] RIP: 0033:0x459829 [ 700.848049] RSP: 002b:00007f534e375c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 700.855738] RAX: ffffffffffffffda RBX: 00007f534e375c90 RCX: 0000000000459829 [ 700.862985] RDX: 000000000000fef0 RSI: 0000000020000300 RDI: 0000000000000003 [ 700.870255] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 700.877504] R10: 0000000000000080 R11: 0000000000000246 R12: 00007f534e3766d4 [ 700.884753] R13: 00000000004c77e7 R14: 00000000004dd068 R15: 0000000000000005 [ 700.912658] IPVS: ftp: loaded support on port[0] = 21 [ 700.961872] FAULT_INJECTION: forcing a failure. [ 700.961872] name failslab, interval 1, probability 0, space 0, times 0 [ 700.977931] CPU: 1 PID: 28608 Comm: syz-executor.1 Not tainted 4.14.139 #35 [ 700.985049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.985088] Call Trace: [ 700.985105] dump_stack+0x138/0x19c [ 700.985122] should_fail.cold+0x10f/0x159 [ 700.985135] should_failslab+0xdb/0x130 [ 700.985146] kmem_cache_alloc+0x2d7/0x780 [ 700.985154] ? ebitmap_destroy+0xba/0xf0 [ 700.985165] ? ext4_sync_fs+0x800/0x800 [ 700.985172] ext4_alloc_inode+0x1d/0x610 [ 700.997397] alloc_inode+0x64/0x180 [ 700.997410] new_inode_pseudo+0x19/0xf0 [ 700.997423] new_inode+0x1f/0x40 [ 701.005156] __ext4_new_inode+0x32c/0x4860 [ 701.005172] ? avc_has_perm+0x2df/0x4b0 [ 701.005189] ? ext4_free_inode+0x1210/0x1210 [ 701.013261] ? security_transition_sid+0xa4/0x130 [ 701.013274] ? selinux_determine_inode_label+0x178/0x340 [ 701.013285] ? dquot_get_next_dqblk+0x160/0x160 [ 701.013303] ext4_create+0x1da/0x4f0 [ 701.021302] ? ext4_mknod+0x4f0/0x4f0 [ 701.021313] ? security_inode_create+0xd0/0x110 [ 701.021323] ? ext4_mknod+0x4f0/0x4f0 [ 701.021336] lookup_open+0x11a6/0x1860 [ 701.028975] ? save_trace+0x290/0x290 [ 701.028998] ? complete_walk+0x1f0/0x1f0 [ 701.029018] path_openat+0xfca/0x3f70 [ 701.036312] ? trace_hardirqs_on+0x10/0x10 [ 701.036331] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 701.036341] ? save_trace+0x290/0x290 [ 701.044514] ? __alloc_fd+0x1d4/0x4a0 [ 701.044526] do_filp_open+0x18e/0x250 [ 701.044537] ? may_open_dev+0xe0/0xe0 [ 701.053758] ? _raw_spin_unlock+0x2d/0x50 [ 701.053768] ? __alloc_fd+0x1d4/0x4a0 [ 701.053788] do_sys_open+0x2c5/0x430 [ 701.053801] ? filp_open+0x70/0x70 [ 701.063884] SyS_open+0x2d/0x40 [ 701.063892] ? do_sys_open+0x430/0x430 [ 701.063904] do_syscall_64+0x1e8/0x640 [ 701.063912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 701.063926] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 701.155297] RIP: 0033:0x459829 [ 701.158469] RSP: 002b:00007fbb56f10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 701.166156] RAX: ffffffffffffffda RBX: 00007fbb56f10c90 RCX: 0000000000459829 [ 701.173406] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 [ 701.180653] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 701.187898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb56f116d4 [ 701.195146] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 000000000000000c [ 701.469820] IPVS: ftp: loaded support on port[0] = 21 [ 701.629292] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 701.641614] FAT-fs (loop3): Filesystem has been set read-only 16:54:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r0, 0x0, 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') tkill(r1, 0x10) r2 = eventfd(0x1) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4601880001000000000000000002000300030000005e0200000000000040000000000000009e03000000000038000100070006000000000000000180000001000000000000000300000000000000ff070000000000002180000000000000c60d000000000000540fbe7200000000a2cde0ab6637c1c79c40bc3100000000000000872ad26e544dd39ff826d50bce0f90321c1e63cf73cdf73d1879a9f1d1056e7b2277492d04fd23bd52c971f458e709635cd736dca3abbae2c9d306a813e8ac7b583229cbc17171d544b434dae3bab87a852e803bd2da39aa"], 0x84) r3 = syz_open_procfs(r0, &(0x7f0000000080)='projid_map\x00') write$P9_RUNLINKAT(r3, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000000)={0x5, 0xa, 0x4, 0x2, {0x77359400}, {0x5, 0xe, 0x400, 0x8, 0x5, 0x8, "6e4e26e5"}, 0xffffffffffff8001, 0x2, @userptr=0x30, 0x4}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1f, 0x1, "3298a72dd42a08e9b44304179205f9448368e320703aca250a09fa74299c6dd7cce567fa22fb2216f41606e2ad32f78a67851375835c9a319a0e6f3b973ae3fb", "b447cc43280cb6d1edc53e11cd9b32fe684be3d24faf0c033f64e1691b00da1479bfc6ded73ced54048a8ecdbe1f484ed4067ef05f16bf65c46644b2e93cb663", "745bdd2ce13939133154fbdd4bfa433a8ae172e5a49e90a5f5eb2364819c0579", [0x2, 0x1]}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) getrandom(&(0x7f0000000040)=""/197, 0xc5, 0x3) creat(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000400)={0x2e, 0x6, 0x0, {0x4, 0x3, 0x5, 0x0, 'vfat\x00'}}, 0x2e) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') r4 = dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000240)=0x3, &(0x7f0000000340)=0x4) 16:54:33 executing program 5 (fault-call:7 fault-nth:4): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$vcsa(0x0, 0x0, 0x640000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) sendto$inet6(r0, &(0x7f0000000300)="0503080108003e0000001140c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfef0, 0x80, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) munlockall() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) getpgid(r4) 16:54:33 executing program 1 (fault-call:29 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:33 executing program 3 (fault-call:17 fault-nth:0): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r3 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000040)={0x11}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/rfcomm\x00') getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000011c0), &(0x7f0000001200)=0x4) r2 = socket(0x840000000002, 0x1, 0x6) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$rxrpc(r0, &(0x7f0000000180)="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", 0x1000, 0x4, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x9}}, 0x24) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0xffffffffffff38e3, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) write$nbd(r2, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/401], 0x191) 16:54:33 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,\x00']) 16:54:33 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x49ffd822, 0x8080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @empty}}, [0x9, 0x7, 0x40, 0x1, 0xcb3, 0x3, 0x7fffffff, 0xffff, 0x1000000000000000, 0x100000001, 0x4, 0xfffffffffffffc40, 0x0, 0x80000001, 0x6]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={r3, 0x5}, &(0x7f0000000440)=0x8) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x440a44, 0x0) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000180)=""/145) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000004c0)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(r1, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000500)=ANY=[@ANYBLOB="6c0f00042000000001000000930000007100000080ffffff07000000060600001f0000000100000009fb6a35fa1a81ccd02f77272e92e6c31ce9c5fff4cc6284a508e46e32ec56c5e5e114"]) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r6 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffff, 0x101800) bind(r6, &(0x7f0000000040)=@l2={0x1f, 0x3d, {0x0, 0xfffffffeffffffff, 0x8, 0x8, 0x1, 0x10001}, 0x80000000, 0x2e}, 0x80) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000240)={0xffffffff}) ptrace$cont(0x9, r1, 0x0, 0x0) [ 702.158597] FAULT_INJECTION: forcing a failure. [ 702.158597] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 702.225904] FAULT_INJECTION: forcing a failure. [ 702.225904] name failslab, interval 1, probability 0, space 0, times 0 [ 702.271393] CPU: 1 PID: 28636 Comm: syz-executor.5 Not tainted 4.14.139 #35 [ 702.278530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.287873] Call Trace: [ 702.287892] dump_stack+0x138/0x19c [ 702.287910] should_fail.cold+0x10f/0x159 [ 702.287921] ? __might_sleep+0x93/0xb0 [ 702.287935] __alloc_pages_nodemask+0x1d6/0x7a0 [ 702.287950] ? __alloc_pages_slowpath+0x2930/0x2930 [ 702.287964] ? __alloc_skb+0x3ee/0x500 [ 702.287976] alloc_pages_current+0xec/0x1e0 [ 702.287990] alloc_skb_with_frags+0x179/0x4b0 [ 702.288004] ? __might_fault+0x110/0x1d0 [ 702.288020] sock_alloc_send_pskb+0x5db/0x740 [ 702.288033] ? iov_iter_advance+0x218/0xc60 [ 702.288045] ? sock_wmalloc+0xf0/0xf0 [ 702.299408] 9pnet: Insufficient options for proto=fd [ 702.302262] ? _copy_from_iter_full+0x1c6/0x6c0 [ 702.302282] packet_sendmsg+0x15f4/0x5a10 [ 702.302297] ? avc_has_perm_noaudit+0x420/0x420 [ 702.316413] FAULT_INJECTION: forcing a failure. [ 702.316413] name failslab, interval 1, probability 0, space 0, times 0 [ 702.320130] ? save_trace+0x290/0x290 [ 702.320140] ? trace_hardirqs_on+0x10/0x10 [ 702.320154] ? lock_downgrade+0x6e0/0x6e0 [ 702.320165] ? __fget+0x210/0x370 [ 702.320186] ? packet_notifier+0x760/0x760 [ 702.329770] audit: type=1804 audit(1566320073.981:198): pid=28651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir997082096/syzkaller.WFM32r/632/file0/file0" dev="loop2" ino=878 res=1 16:54:34 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = dup2(r0, r0) fcntl$addseals(r0, 0x409, 0x4) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000002c0)={0x0, @reserved}) [ 702.333203] ? selinux_socket_sendmsg+0x36/0x40 [ 702.333215] ? security_socket_sendmsg+0x89/0xb0 [ 702.333228] ? packet_notifier+0x760/0x760 [ 702.338083] audit: type=1804 audit(1566320073.981:199): pid=28651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir997082096/syzkaller.WFM32r/632/file0/file0" dev="loop2" ino=878 res=1 [ 702.341316] sock_sendmsg+0xce/0x110 [ 702.341327] SYSC_sendto+0x206/0x310 [ 702.341338] ? SYSC_connect+0x2d0/0x2d0 [ 702.341349] ? lock_downgrade+0x6e0/0x6e0 [ 702.341370] ? wait_for_completion+0x420/0x420 [ 702.418669] ? __sb_end_write+0xc1/0x100 [ 702.418683] ? fput+0xd4/0x150 [ 702.418692] ? SyS_write+0x15e/0x230 [ 702.418704] SyS_sendto+0x40/0x50 [ 702.451945] ptrace attach of "/root/syz-executor.0"[28660] was attempted by "/root/syz-executor.0"[28661] [ 702.459553] ? SyS_getpeername+0x30/0x30 [ 702.459568] do_syscall_64+0x1e8/0x640 [ 702.459578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.483712] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 702.483720] RIP: 0033:0x459829 [ 702.483727] RSP: 002b:00007f534e375c78 EFLAGS: 00000246 [ 702.503726] ORIG_RAX: 000000000000002c [ 702.503732] RAX: ffffffffffffffda RBX: 00007f534e375c90 RCX: 0000000000459829 [ 702.503738] RDX: 000000000000fef0 RSI: 0000000020000300 RDI: 0000000000000003 [ 702.503744] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 702.503749] R10: 0000000000000080 R11: 0000000000000246 R12: 00007f534e3766d4 [ 702.503755] R13: 00000000004c77e7 R14: 00000000004dd068 R15: 0000000000000005 [ 702.542653] CPU: 1 PID: 28644 Comm: syz-executor.3 Not tainted 4.14.139 #35 [ 702.577812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.587161] Call Trace: [ 702.589748] dump_stack+0x138/0x19c [ 702.593371] should_fail.cold+0x10f/0x159 [ 702.597519] should_failslab+0xdb/0x130 [ 702.601487] kmem_cache_alloc+0x2d7/0x780 [ 702.605636] ? lock_downgrade+0x6e0/0x6e0 [ 702.609783] getname_flags+0xcb/0x580 [ 702.613580] getname+0x1a/0x20 [ 702.616766] do_sys_open+0x1e7/0x430 [ 702.620470] ? filp_open+0x70/0x70 [ 702.620488] SyS_open+0x2d/0x40 [ 702.620496] ? do_sys_open+0x430/0x430 [ 702.620509] do_syscall_64+0x1e8/0x640 [ 702.620518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.639888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 702.645073] RIP: 0033:0x459829 [ 702.648257] RSP: 002b:00007fb24d1e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 702.655958] RAX: ffffffffffffffda RBX: 00007fb24d1e2c90 RCX: 0000000000459829 [ 702.663228] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 [ 702.670490] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 702.677841] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb24d1e36d4 [ 702.685104] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 0000000000000006 [ 702.692430] CPU: 0 PID: 28653 Comm: syz-executor.1 Not tainted 4.14.139 #35 [ 702.699534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.708884] Call Trace: [ 702.711470] dump_stack+0x138/0x19c [ 702.715108] should_fail.cold+0x10f/0x159 [ 702.719257] should_failslab+0xdb/0x130 [ 702.723232] kmem_cache_alloc+0x2d7/0x780 [ 702.727391] ? check_preemption_disabled+0x3c/0x250 [ 702.732408] selinux_inode_alloc_security+0xb6/0x2a0 [ 702.737516] security_inode_alloc+0x94/0xd0 [ 702.741845] inode_init_always+0x552/0xaf0 [ 702.746078] alloc_inode+0x81/0x180 [ 702.749705] new_inode_pseudo+0x19/0xf0 [ 702.753679] new_inode+0x1f/0x40 [ 702.757047] __ext4_new_inode+0x32c/0x4860 [ 702.761291] ? avc_has_perm+0x2df/0x4b0 [ 702.765270] ? ext4_free_inode+0x1210/0x1210 [ 702.770028] ? security_transition_sid+0xa4/0x130 [ 702.774868] ? dquot_get_next_dqblk+0x160/0x160 [ 702.779532] ? retint_kernel+0x2d/0x2d [ 702.783422] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 702.788175] ext4_create+0x1da/0x4f0 [ 702.791893] ? ext4_mknod+0x4f0/0x4f0 [ 702.795695] ? lookup_open+0x690/0x1860 [ 702.799669] ? ext4_mknod+0x4f0/0x4f0 [ 702.803470] lookup_open+0x11a6/0x1860 [ 702.807354] ? save_trace+0x290/0x290 [ 702.811168] ? complete_walk+0x1f0/0x1f0 [ 702.815240] path_openat+0xfca/0x3f70 [ 702.819039] ? get_pid_task+0x98/0x140 16:54:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:54:34 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1, 0x1, 0x35}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 702.822936] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 702.827600] ? save_trace+0x290/0x290 [ 702.831392] ? __alloc_fd+0x1d4/0x4a0 [ 702.831403] do_filp_open+0x18e/0x250 [ 702.831413] ? may_open_dev+0xe0/0xe0 [ 702.831434] ? _raw_spin_unlock+0x2d/0x50 [ 702.831442] ? __alloc_fd+0x1d4/0x4a0 [ 702.831461] do_sys_open+0x2c5/0x430 [ 702.854428] ? filp_open+0x70/0x70 [ 702.857974] SyS_open+0x2d/0x40 [ 702.861249] ? do_sys_open+0x430/0x430 [ 702.865132] do_syscall_64+0x1e8/0x640 [ 702.869013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.873860] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 702.879042] RIP: 0033:0x459829 [ 702.882224] RSP: 002b:00007fbb56ecdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 702.889929] RAX: ffffffffffffffda RBX: 00007fbb56ecdc90 RCX: 0000000000459829 [ 702.897193] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 00000000200001c0 [ 702.904462] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 702.911728] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb56ece6d4 16:54:34 executing program 4: r0 = socket$inet6(0xa, 0xa243a39bbd5ce84d, 0x10000) close(r0) 16:54:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r6 = dup(r2) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r7, r8) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r6, &(0x7f0000000040)={0x11}) r9 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r9, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 702.918993] R13: 00000000004f8fdf R14: 00000000004dabf0 R15: 000000000000000c 16:54:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x44, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xece6310a8ef1ea29}, 0x40800) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 703.213224] audit: type=1804 audit(1566320074.921:200): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir226688548/syzkaller.VYpRv5/427/file0" dev="sda1" ino=17632 res=1 [ 703.321943] audit: type=1804 audit(1566320074.951:201): pid=28694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir226688548/syzkaller.VYpRv5/427/file0" dev="sda1" ino=17632 res=1 16:54:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xf02c, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x640000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) sendto$inet6(r0, &(0x7f0000000300)="0503080108003e0000001140c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfef0, 0x80, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) munlockall() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) getpgid(r4) 16:54:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000300)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) fchdir(r1) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x20, 0x401, 0x5}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x10004) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000008b08b7960ff7aa6e041a7700fdff863809aa003300000052b1d85cbf000000000038f70f653f0ffb09f0d536b564df5e0a"], 0x36) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x0, 0x20) sendto$unix(r3, &(0x7f00000000c0), 0x0, 0x4004084, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendfile(r2, r2, &(0x7f0000000000), 0x8080ffffffff) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) 16:54:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001900)={0x0, 0x40000000001, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @speck128, 0x2, "f39aea1530fa1828"}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x100000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x41000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") close(r0) rt_sigsuspend(&(0x7f0000000000)={0x3}, 0x8) 16:54:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6a19f4d6, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "3f00000092d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab75895b6e9bb6fd5b5f2ee63c977450100"}, 0x99) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(r0, r4, 0x6, 0x1) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:35 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r4 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) fcntl$setsig(r4, 0xa, 0x1b) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000000040)={0x11}) open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) [ 703.387405] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 703.425446] FAT-fs (loop3): Filesystem has been set read-only [ 703.976839] audit: type=1804 audit(1566320075.661:202): pid=28688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir997082096/syzkaller.WFM32r/633/file0/file0" dev="loop2" ino=880 res=1 [ 704.009028] audit: type=1804 audit(1566320075.691:203): pid=28693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir997082096/syzkaller.WFM32r/633/file0/file0" dev="loop2" ino=880 res=1 [ 704.060406] audit: type=1804 audit(1566320075.771:204): pid=28715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir226688548/syzkaller.VYpRv5/428/file0" dev="sda1" ino=17649 res=1 16:54:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r5, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r6 = dup(r2) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r7, r8) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r6, &(0x7f0000000040)={0x11}) r9 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r9, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r5 = dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000100)=0x618) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r6, r7) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:36 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 16:54:36 executing program 4: syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x473fc4a34969ab09, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x20047eb5) syz_open_dev$usb(0x0, 0x0, 0x280) preadv(r2, &(0x7f0000000480), 0x10000000000000f3, 0x0) [ 704.604933] audit: type=1804 audit(1566320076.311:205): pid=28725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir461132686/syzkaller.yZ4Xuu/761/file0" dev="sda1" ino=17663 res=1 16:54:36 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000200)={&(0x7f0000000400)="ce7e0a6179f52708e08ee1abe2b1c23cf4569b047b9e2d24823c744f6840d82ec8bac95b9edff0ad8c8065f52e8f215b210ede705c06d7dcb7711d7fb0b20a3e301c0a4810da80757c780891d4b5d7e5b939120ac008bed9303eea0919406d3b9ad9534208ee8e68b1b0a44e789e5f9d1650d50e26a4a2c7580fc115378c14d6cb23cd766bcea2e98a1ff05a76f9b249de1f82927c7f8ce5e93461a2d534079073fd49354a5e83f8a1403d119f1a98057e6483fdf5809d3e57de3763fe6b5245a77798737cec9f2663fc8c85284be2bd2f93", 0xd2}) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./bus\x00') r5 = dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) utime(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000040)={0x11}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./bus\x00', r3}, 0x10) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 704.795244] audit: type=1804 audit(1566320076.351:206): pid=28744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir461132686/syzkaller.yZ4Xuu/761/file0" dev="sda1" ino=17663 res=1 16:54:36 executing program 4: syz_init_net_socket$ax25(0x3, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x473fc4a34969ab09, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x20047eb5) syz_open_dev$usb(0x0, 0x0, 0x280) preadv(r2, &(0x7f0000000480), 0x10000000000000f3, 0x0) 16:54:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffffffffffc, @remote, 0x8}, 0xffffffffffffff01) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2802, 0x0) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 704.986054] audit: type=1804 audit(1566320076.631:207): pid=28754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir226688548/syzkaller.VYpRv5/429/file0" dev="sda1" ino=17615 res=1 [ 705.372425] ------------[ cut here ]------------ [ 705.377215] kernel BUG at fs/buffer.c:605! [ 705.381716] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 705.387082] Modules linked in: [ 705.389315] kobject: 'loop3' (ffff8880a4a4d1a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 705.390270] CPU: 1 PID: 28762 Comm: syz-executor.3 Not tainted 4.14.139 #35 [ 705.390275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.390280] task: ffff888052188100 task.stack: ffff8880616f0000 [ 705.390293] RIP: 0010:mark_buffer_dirty_inode+0x2ea/0x3e0 [ 705.390299] RSP: 0018:ffff8880616f7678 EFLAGS: 00010246 [ 705.433067] RAX: 0000000000040000 RBX: ffff88809410d540 RCX: ffffc9000b866000 [ 705.437150] kobject: 'kvm' (ffff888219fde610): kobject_uevent_env [ 705.440332] RDX: 0000000000040000 RSI: ffffffff819964ca RDI: ffff88809428f478 [ 705.440338] RBP: ffff8880616f76b0 R08: ffff888052188100 R09: 0000000000000004 [ 705.440342] R10: 0000000000000000 R11: ffff888052188100 R12: ffff88809428f318 [ 705.440346] R13: 0000000000000000 R14: ffff8880a77d2ae0 R15: 0000000000001280 [ 705.440353] FS: 00007fb24d1e3700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 705.440357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.440363] CR2: 0000000000000000 CR3: 000000009950a000 CR4: 00000000001426e0 [ 705.457411] kobject: 'kvm' (ffff888219fde610): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 705.461087] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 705.461093] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 705.461096] Call Trace: [ 705.461112] fat16_ent_put+0xc5/0x100 [ 705.461122] fat_free_clusters+0x369/0x810 [ 705.530958] ? fat_ent_read+0xa30/0xa30 [ 705.534919] ? check_preemption_disabled+0x3c/0x250 [ 705.539918] ? __mark_inode_dirty+0x2b7/0x1040 [ 705.544501] fat_truncate_blocks+0x693/0xae0 [ 705.548890] ? fat_file_release+0x140/0x140 [ 705.553195] ? lock_acquire+0x16f/0x430 [ 705.557144] ? fat_setattr+0x671/0xae0 [ 705.561013] ? truncate_pagecache+0x7b/0x90 [ 705.565315] fat_setattr+0x6c1/0xae0 [ 705.569009] ? security_inode_setattr+0xe1/0x130 [ 705.573742] ? fat_truncate_blocks+0xae0/0xae0 [ 705.578302] notify_change+0x8d1/0xd10 [ 705.582171] do_truncate+0x124/0x1c0 [ 705.585861] ? file_open_root+0x2b0/0x2b0 [ 705.589989] path_openat+0x2786/0x3f70 [ 705.593859] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 705.599202] ? trace_hardirqs_on+0x10/0x10 [ 705.603417] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 705.608066] ? __lock_is_held+0xb6/0x140 [ 705.612108] ? save_trace+0x290/0x290 [ 705.615890] ? __alloc_fd+0x1d4/0x4a0 [ 705.619667] do_filp_open+0x18e/0x250 [ 705.623445] ? __alloc_fd+0x1d4/0x4a0 [ 705.627226] ? may_open_dev+0xe0/0xe0 [ 705.631009] ? _raw_spin_unlock+0x2d/0x50 [ 705.635136] ? __alloc_fd+0x1d4/0x4a0 [ 705.638920] do_sys_open+0x2c5/0x430 [ 705.642613] ? filp_open+0x70/0x70 [ 705.646133] ? SyS_clock_gettime+0xf8/0x180 [ 705.650435] ? do_syscall_64+0x53/0x640 [ 705.654388] SyS_creat+0x27/0x30 [ 705.657730] ? compat_SyS_openat+0x40/0x40 [ 705.661943] do_syscall_64+0x1e8/0x640 [ 705.665811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 705.670636] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 705.675802] RIP: 0033:0x459829 [ 705.678968] RSP: 002b:00007fb24d1e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 705.686674] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459829 [ 705.693925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 705.701175] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 705.708424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb24d1e36d4 [ 705.715671] R13: 00000000004bfe84 R14: 00000000004d1d40 R15: 00000000ffffffff 16:54:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$vcsa(0x0, 0x0, 0x640000) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x101) sendto$inet6(r0, &(0x7f0000000300)="0503080108003e0000001140c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfef0, 0x80, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x200) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) munlockall() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) getpgid(r4) 16:54:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet6(0xa, 0x801, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) dup(r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fchown(r0, r5, r6) getresuid(0x0, 0x0, 0x0) signalfd(r1, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x91) utime(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r7, &(0x7f0000000100)={0x20002002}) r8 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r8, &(0x7f00000000c0)="e1bf1601c2da1dc67aa0c68916d4114d5696932a19d60750949e3d7337ebd55d", 0x20) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) 16:54:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000500)={'syz'}, 0x0, 0xfffffffffffffffb) fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x44, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xece6310a8ef1ea29}, 0x40800) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000180)='./bus\x00') dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) utime(0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) [ 705.722931] Code: fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 4d 4c 89 63 58 4c 89 ef e8 10 9d 82 04 e9 13 fe ff ff e8 a6 78 c3 ff <0f> 0b 4c 89 ff e8 5c 25 ed ff e9 f8 fd ff ff e8 52 25 ed ff e9 [ 705.742046] RIP: mark_buffer_dirty_inode+0x2ea/0x3e0 RSP: ffff8880616f7678 [ 705.762371] ---[ end trace 32ebebee7da3127b ]--- [ 705.767422] kobject: 'loop5' (ffff8880a4afe9e0): kobject_uevent_env [ 705.774074] kobject: 'loop5' (ffff8880a4afe9e0): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 705.791775] Kernel panic - not syncing: Fatal exception [ 705.798514] Kernel Offset: disabled [ 705.802138] Rebooting in 86400 seconds..