a7ffdae464faddd1b00227a1a9686c6830e5ca5fb5d8a388807c121c983ba65ab2ddf2162863a0206ba6de008be0450e19ec7a759db7d44218e6bc5141b833a843d36b1faca855cc3b1b231a23d7401ef68102b8ad878074004a20faec7488c90cf348129e31e992d39845b58dcafc2a8620c4b0977bf0cc8f8c0a1810d3da6e6ec0751e6abc0e68e39ea74d8bd810cf5c291fde418c37649b231ccf2c184b2050886b20a04b01d65b4b314680fc570d70dce7e33bb424606e2707254acf2bfcbd2fe98ea9a269524a885db324b99ef82ae31a9ff693b9bb73a2babb7774a3ab76117436280e33f6ae0916c46f818caa410e41533e717d2b20480472fc48227f510a9746a2d0b29af8c52c21ebe3ee76ff92a58d2ae0da2d810edae025596b4d5b5443f4d2b7db1ecdf5a913c3ea8f9bd1ec0a5e6d1bf9f0f3105f114fd27ed8114bf299314a949ac3eba4909cfcb58d5b9d8826887a2225", 0x1000, 0x0, 0x0, 0x2, r1}]) 03:42:19 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:19 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x2, r4}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0xf, 0x25, 0x3, 0xc, 0xb, 0x2, 0x4, 0xf7, 0xffffffffffffffff}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:19 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x14) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:20 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000300)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080)="35e40691ad", &(0x7f00000001c0)="7a2114f175bf969d570fd150608ddde58c5d2b57bec60d1ff72397cbce0d665f7d512969db37c0e695a7a6ecbc5573c687b77d6ab73ed1803f27598ccba17bee9e218e163aeb33dca7804a14b974e097660df111aeb1e1ae8c2e2ad224e7dcc3d5352d5d217cc13c9b91dcfdf4a617076f9005afafe9a13f79935819a2846eeda32381e8fa51c838a4ae28a71dbc3ced31300460ea42b59eae478dc01afcfaa9bf50e5db8049c18d56245d29532a2fd508f0b3a403a1af94d545142f18c4a133a2303077a46ac4435369c4562164db87fc"}, 0x20) 03:42:20 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:20 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1b) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 485.235654][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 485.291540][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:20 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x28, &(0x7f0000000080)}, 0x10) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x40e}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0x1ff, @loopback, 0x14c8}}, 0x3, 0x2, 0x3f, 0x67, 0x4f}, &(0x7f0000000340)=0x98) [ 485.443429][ T26] audit: type=1804 audit(1567741340.554:152): pid=28015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/449/file0/file0" dev="sda1" ino=17944 res=1 03:42:20 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = dup2(r2, 0xffffffffffffffff) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f00000001c0)={0xab, 0x8, &(0x7f0000000340)="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", {0x0, 0x7ff, 0x32435750, 0x0, 0xffff, 0x2, 0x1, 0x8000}}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:20 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xf0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:20 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:20 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$P9_RFLUSH(r2, &(0x7f00000001c0)={0x7, 0x6d, 0x1}, 0x7) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0xaac40, 0x0) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:21 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 486.092930][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 03:42:21 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1e2) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:21 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r7}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 486.134924][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:21 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x300) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 486.906094][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 486.936955][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:22 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:22 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x200040, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000200)={0x9, 0x0, 0x2018, 0x1ff, 0x4, 0x7, 0xeba9, 0x2}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000180)={0xffff, 0x40}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:22 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x480) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 487.110478][T28148] QAT: Invalid ioctl 03:42:22 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:22 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000380), 0x100000000000015a, 0xfffffffffffffffc) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 487.305404][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 487.328930][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:22 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x500) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x5}], 0x14e) semop(r0, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) getresgid(0x0, &(0x7f0000000400)=0x0, 0x0) setgid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) getresgid(0x0, &(0x7f0000000400)=0x0, 0x0) setgid(r4) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000440)={{0x3, 0xee01, r1, r3, r4, 0x1, 0x6}, 0x0, 0x0, 0x3}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r6, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_NMI(r9, 0xae9a) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x401}, 0x8) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl(r9, 0x8, &(0x7f00000001c0)="ac77447a6babdd14414cde6f188b06b1c155e57b6d5772a0eb3f4eee3fb0f143cc64ce2191d4d0cccdf0389f8fc3804002b23e54b62d23cbf67d2b11a0") add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:22 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x600) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:22 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x4040, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000002c0)) write$P9_RGETLOCK(r4, &(0x7f0000000080)={0x2b, 0x37, 0x1, {0x0, 0x8, 0x7fff8000000000, r5, 0xd, '/dev/net/tun\x00'}}, 0x2b) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 03:42:23 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x700) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:23 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) lseek(r2, 0x12, 0x3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f00000001c0)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$void(r2, 0xc0045878) 03:42:23 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:23 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0xf}, 0x8}}}, 0x30) [ 487.937841][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 487.956652][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:23 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0xfffffffffffffcd1}], 0x1, 0x3) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:23 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x926) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:23 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:23 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000001c0)=0x101, 0x4) fchdir(r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:23 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0xa, [0x4, 0x101, 0x4, 0x5, 0x800, 0x400, 0x8, 0x3f, 0x7fffffff, 0x800]}, &(0x7f00000001c0)=0x18) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 488.588816][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 488.628921][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:23 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xc00) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:23 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x3aa580, 0x1, 0x10001, 0xe000000}, {0x7fffffff, 0x0, 0x6, 0x8000}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$vsock_dgram(r3, &(0x7f0000000280)={0x28, 0x0, 0x2710, @reserved}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6023266800402f00fe8000000000000000000000000000aafe8000000000000000000000000000aa042088beffff000000000800000086dd080088be00000000100000000800000000000000080022eb080000002000000002000000000000000000000008006558000000000c87e39bc016d8a915e319c5113b45bb47e43ecdc067faf5eab1aa9123b691884c2233f422a775c078cd804f5c8c3b53bc4b32e4900dd18d28caca8edd52c4f3948cbf8b0d17197e2883de483ed9cfa24b9f6e97459b88ccac4291aaaf75c204ef81eb7c213fa61109000000000000007415fb5dec525a1f77a4ce427caa50d07dc28029024507b9cc31b878ba3c771ccf3436f8ebc82f927f25a017a6b912be6c04ba691ec1194ee0bf9613bbe6df7e99edebab0052961dec107c4b6def89510677bf9e9e52b47227419261b75bb432dcf0df0d60ea94dc4ae9e6c7d576732a9ab6fa68eb7bea792ac544adc5ef6366633181dd45d6c73e19f5e127d46e4a0a5325433209521e49117b64f821b14d9aff37bc1fc6a6e77f4751dc76ff32a4e96a61d2074da71b0b77faeb8943e1b94173a4ca5ce1ce090cd556fbd74c008b3d21cd414edbbf88d19ae1affcec26cbdeb3bce7ff76d817dc4faaced1cd62caaa471bf12af7dbbeafd62bd6eafe4bcd257ad6c53ad88eceb02f35166114cd081c8d376cce217e5fc52ef6af8e4a7ef77590d7e05610afb5ae89122ed7498582cc248d502c7ad67df0daa9a07c28f6ae3878a9870bbeb9b63d4f29ea9379c72248d4d7cb78634e82765c923af16037dbbdf89b21c1387dd4f05fffa9ad170d9d30e837a8586b1d79a9420a6cc931e056e7fe89fd8d5704aac550ebfb7e60f5feb9ecd1720c4528fde2b6aa3c5cfb869906fc4f61f69b98a58337cff6995ffc6bc2d06422336da1b9289e865fbf57f7be9add01552b86a19391daf9686c2663905a804ee7e7809e2e45463419a13f1ff08f2efcdb04090baf7c4d922804402daed4a7d18870f8d6294fcdea4581f8bde36e7f1d66c56f1c3c10b5762919e63f5c5d09f3bf6135271e7944fcef7bc8f0b1077d2f168cc47931ae76ac158c4d7b1e1906afad49e47022c92b4c76c74727d9d54a396ba347b43cfbdf2509577e8efabb33fbfeeeb052c1967cac205605d0996aed9aa09d8797ecfaefc53578251bea9a1e1f479a3fa8a326162e147f458892ddcae522eb934e385ea59a8a4f05b5754b1f9ae113ee630f996e2c43f17b1c35f79e626b644e7829fda4fd47fb"], &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:24 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 489.007843][T28279] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x2 [ 489.049539][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 489.069836][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:24 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1200) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 489.116128][T28285] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x2 03:42:24 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:24 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:24 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='\x01\x00\x00\x00t\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480), 0x10000000000000f1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:24 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1400) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 489.580929][ T26] audit: type=1804 audit(1567741344.694:153): pid=28274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/453/file0/file0" dev="loop0" ino=937 res=1 03:42:24 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 489.683595][ T26] audit: type=1804 audit(1567741344.694:154): pid=28315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/453/file0/file0" dev="loop0" ino=937 res=1 03:42:25 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1b00) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:25 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000001c0)={0x0, 0x401, 0x6}) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:25 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 490.196739][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 490.227004][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:25 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x2000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:25 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x2609) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:25 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 490.766265][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 490.805593][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:26 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x3f00) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 491.265332][ T26] audit: type=1804 audit(1567741346.374:155): pid=28396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/455/file0/file0" dev="loop0" ino=945 res=1 03:42:26 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="04ae0c064787a851865e51e333000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0x9, 0x100, 0xaefb, 0x6, 0x2ff1c3378000000}, 0x14) [ 491.361947][ T26] audit: type=1804 audit(1567741346.374:156): pid=28369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/455/file0/file0" dev="loop0" ino=945 res=1 03:42:26 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:26 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:26 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000540)={0x0, 0x1, 0x6, @remote}, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x4, 0x4480) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x160, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x27e1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa172}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2374}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x87, @mcast2, 0xfffffffffffffffd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @empty, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x800, @mcast2, 0x401}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x24000}, 0x8800) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 491.484344][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 491.525953][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:26 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000080)=[{0x9, 0x4d, 0x5, 0x4}, {0x1000, 0x8, 0x74, 0x4}, {0x7fff, 0xdc, 0x8, 0xd0}, {0x3, 0xffff, 0x6, 0x3f}, {0x3, 0x2, 0x80000001, 0x80000001}]}) [ 491.693095][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 491.716759][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:27 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x8004) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0)=0x8f0, 0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e24, 0x9, @remote, 0x291}}}, 0x84) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) write(r2, &(0x7f0000000200)="0690e063c3e321bdcde9b28715d758f990dba0038b716d15742c372bf233728c5c2125228f16586034eecf54396484298c306a0f08ff17b6db2cb9443317b117f8e795b32017a5f58abfcbf1ea85823c966157d34b11d4079f033d7492c6341e07fb86f364f8df3cb718d9056d662eed6c58f720a872c643a886dba64b1b63f874fc0be4c9d29d4952d7db18abd840a13f2e3ac000f96f01e964a11f3a600d3ecc4735c68f7f12287865876938c117ea6e30fe496615cc317020398f1ef2eb2e85ad4ec4957bb0110cb1f1f91fb23db85398bf73bc7a07d78206513b", 0xdc) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 03:42:27 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) open(&(0x7f00000004c0)='./file1/../file0\x00', 0x410000, 0x88) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) alarm(0xffffffffffffff33) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) getresgid(0x0, &(0x7f0000000400)=0x0, 0x0) setgid(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000008c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000a00)=0xe8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000b40)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000500)='hfsplus\x00', &(0x7f0000000540)='./file0\x00', 0x8000000000, 0x3, &(0x7f0000000740)=[{&(0x7f0000000580)="452b769776c5db85926c6dd5b3c4e351eb91027a7306dbfda8526d9946ec58fc03c6d13be8dcb701fc4c561c83b94baa0713a3fb4ac32ce5a1f4821aeb6324086a985339415e704a2fb89dff9e172f2ec91f3374ce5ae1a1a6e5d51e34ba92b8152aaaeaa6ac7d1088eb7715641526b5bebfbfd0a77bd219fb4361cbe357da9884a6e720fe873a736c09b358b99e8b079cb4292b647f801b08368d61ec0428f61875af681638bbf8e798765d11ac2542ead928f6fb70d826", 0xb8, 0xf2}, {&(0x7f0000000640)="c52779c8da066a85046ca5e91440b76427c978cde648bea82acbc523af17ea20acf9d219c0f1f1f4abd1c4e4000c7010ed6c429daa856bfb6abbde0b55465f7dffef0c8583a5d5c0cd901792a2e494832d1c836d7d0845356c00620593cb1bb7474a9d707a0ab1f5facf153dc5abc80bcc1b041df3c244112601948ad2791f8a42e441231d9af33c5ff895f4879f8d637532364049d60e9c777d038df2cb8dd0a0c0d415ea", 0xa5, 0x9}, {&(0x7f0000000700)="a867266b", 0x4}], 0xb77576604fbe1d1d, &(0x7f0000000b80)={[{@nodecompose='nodecompose'}, {@gid={'gid', 0x3d, r1}}, {@nls={'nls', 0x3d, 'cp863'}}, {@session={'session', 0x3d, 0xe21}}], [{@uid_eq={'uid', 0x3d, r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x30bb97b97ce06cf0, 0x37, 0x34, 0x62, 0x32, 0x65, 0x64, 0x38], 0x2d, [0x36, 0x35, 0x62, 0xad75d23de892741e], 0x2d, [0x65, 0x37, 0x30, 0xd4], 0x2d, [0x37, 0x5, 0x0, 0x19], 0x2d, [0x31, 0x39, 0x30, 0x36, 0x61, 0x37, 0x65, 0x5b]}}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@appraise='appraise'}, {@fowner_gt={'fowner>', r5}}]}) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r6, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file1/../file0\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x68401, 0x0) bind$bt_sco(r7, &(0x7f0000000280)={0x1f, {0x101, 0x2, 0x4, 0xee0f, 0x0, 0x9}}, 0x8) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:27 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:27 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) preadv(r3, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/77, 0x4d}], 0x1000000000000310, 0x2) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:27 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xe201) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:27 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:27 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xf000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:28 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) read$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:28 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 493.201644][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 493.218463][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:28 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xff00) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 493.412816][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 493.477127][T10330] FAT-fs (loop4): Filesystem has been set read-only [ 493.516138][ T26] audit: type=1804 audit(1567741348.624:157): pid=28540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/458/file0/file0" dev="loop0" ino=957 res=1 03:42:28 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x200000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:28 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000001c0)=0x9, 0x4) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x50d, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:29 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) syz_open_dev$char_usb(0xc, 0xb4, 0xb3a) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x4e0fb2d0d00d80d0, &(0x7f00000001c0)="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", 0x1000) 03:42:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000300)="11dca5055e0bcfe47bf070") r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x6) write$evdev(r3, &(0x7f0000000180)=[{{0x0, 0x7530}, 0x2, 0x8, 0xb02f}], 0x11e8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x400080, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:29 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 494.220382][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 494.254664][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:29 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000004c0)={0x3, &(0x7f00000001c0)=""/131, &(0x7f0000000440)=[{0xffff, 0xfc, 0x0, &(0x7f0000000280)=""/252}, {0x2370, 0xc0, 0x200, &(0x7f0000000380)=""/192}, {0x3, 0x28, 0x4, &(0x7f0000000080)=""/40}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:29 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xf0ffff) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:29 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:29 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/new/tun\x00', 0x2d0a01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000240)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x42000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0xd7e, 0x0, 0x5, 0x7ff, 0x2}) 03:42:29 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:30 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 494.937498][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 494.964099][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:30 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:30 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x3, 0x9, 0x100000001, 0x98, 0x0, 0x38, 0x14001, 0xb, 0x9, 0x0, 0x2, 0xfff, 0x0, 0x1ff, 0x5, 0x3b5, 0x401, 0x401, 0x1a349a3e, 0x6, 0x4, 0x81, 0x8000, 0x9600000000000000, 0x41, 0x7, 0x800, 0x6, 0x0, 0x80000001, 0x9a7, 0x3f, 0x1f, 0x91, 0x400, 0x7, 0x0, 0x4, 0x6, @perf_config_ext={0x7, 0xce0}, 0x2000, 0xaa2c, 0xfffffffffffffff8, 0x1, 0x6, 0x80000000, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:30 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x2000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:30 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:42:30 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockname$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000300)=0x6e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/de\x82/nut/tun\x00', 0x80000, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r5}) r6 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', r7}) setsockopt$inet_mreqn(r1, 0x0, 0x46, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, r7}, 0xc) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) msgsnd(0x0, &(0x7f0000000180)={0x924fdbb08acf603a, "758a296e83258f1f9c7607133f96ec8049b8a89bfb8cce9f651fbad8d6b1600cf29ff86093de3f16176ab3dc0adc4388a42c2abb66bab225fe594af284835a4571ab9a8ddf248820350380f59393e1a5e2d4c0d523c0ab1f6476d7c3f7b1f0ebfedf277c674544a7ddac54b9f647d6"}, 0x77, 0x800) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:30 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x3000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:31 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:31 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x400, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x40, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x30b) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x400, 0x401) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) fsync(r0) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x1, 0x1, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x1d, r6}, 0x10, &(0x7f0000000400)={&(0x7f00000003c0)=@can={{0x3, 0x3ff, 0x23}, 0x6, 0x2, 0x0, 0x0, "4b80bca65f79819f"}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VIDIOC_S_MODULATOR(r7, 0x40445637, &(0x7f0000000580)={0x80000001, "3e6048084b19428055e38432e938e254f0837877322aa3b93f8ff75d624aa0f2", 0x1002, 0x5, 0x4, 0x4, 0x5}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x194, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r8, 0x1000}}, 0x10) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:31 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:31 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000200)={0x1, 0xfe97c744ebc489ab, 0x9}) r3 = dup(r1) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000001c0)=0x8, 0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:31 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:31 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 496.686481][ T26] audit: type=1804 audit(1567741351.794:158): pid=28708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/462/file0/file0" dev="loop0" ino=963 res=1 [ 496.783427][ T26] audit: type=1804 audit(1567741351.804:159): pid=28747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/462/file0/file0" dev="loop0" ino=963 res=1 03:42:31 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x444001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x801, 0xa3f2d95ae475e27e) setns(r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x7, 0x20000800, 0xffffffffffffffff, 0x401, 0x6, 0x80000084, 0x8, 0x7, 0x1, 0x1}, 0x10) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x300000000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="21080000000000000000030000005800010044000400f46d38ac7607c8c1fe9a9b68cf25200001000a00000000000000fe88000000000000000000000000000002000000200002000a00000000000000fe8000000000000000000000000000aa00000000100001007564703a73797a3200000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0ae}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3921}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x908}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x80010}, 0x8000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r7 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r7}) preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) write$FUSE_LSEEK(r7, &(0x7f0000000200)={0x18, 0x0, 0x3, {0x17368d3f}}, 0x18) [ 496.839013][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 03:42:32 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x6000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 496.923939][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:32 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) [ 497.058199][T28760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 497.171040][T28767] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 03:42:32 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) signalfd(r2, &(0x7f00000001c0)={0x67}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000240)=0xa0, 0x2) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fdatasync(r4) [ 497.264182][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 497.322844][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:32 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x280800, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x4, {0x10000}}, 0x18) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000280)=ANY=[]) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r4}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:32 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x7000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:32 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x8000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYPTR]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:33 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x8000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000240)={0x5, 0x3f, &(0x7f00000001c0)="2bae0513ed7e0261fad3c904ea18c028459ac3d5b9d5d5afa571f9a81a0e92055015fba0f3495d68c6e1ed001a095178edecbafb6792600112ffe42ad4ad62"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)='overlay\x00', 0x33804c3, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on='index=on'}], [{@euid_lt={'euid<', r2}}, {@euid_gt={'euid>', 0xee00}}, {@fowner_lt={'fowner<', r4}}]}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r6, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:33 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x9260000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:33 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0xfe02d0da0d8449a2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) sendto$netrom(r3, &(0x7f00000001c0)="2521d11a82ddc2e862df2361a5eb6f84e1d4ec872f17eb30a0215e34c8d35747b5674280414f642e40116cd6cf35cde1a2775bee9b085b102b196da7ea61f29d80666946d9e8f5feadb6f0f896630a1c9da35927eb6b70377af0036b0aafa4eaa9900d80c21b45401720546128d1cb525fe65348db8db3ebe4da755f52d7def316a3f1d7d1708c3919289f909345175f7167dc071f", 0x95, 0x8000000, &(0x7f0000000280)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:33 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xc000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:33 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYRES16, @ANYRESOCT=r1]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 498.461637][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 498.478418][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:33 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0xb2) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x39f) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000480)='/dev/input/event#\x00', 0x4, 0x84841) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000440)=r4) r5 = fcntl$dupfd(r3, 0x0, r3) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x10800, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000240)) open(&(0x7f00000004c0)='./file0\x00', 0x15b4894beb8a4dd3, 0x100) creat(&(0x7f0000000180)='./file0\x00', 0x0) unshare(0x600) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000000c0)={0xfff}, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x0, 0x0) connect$bt_sco(r5, &(0x7f0000000340)={0x1f, {0x3, 0x3, 0x7ff, 0x6, 0x915, 0xf8}}, 0x8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:33 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x8000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r4 = getpid() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x20000, 0x0) sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) ptrace$peekuser(0x3, r4, 0x5dc3525f) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x7fffffff, 0x1) 03:42:33 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = dup(0xffffffffffffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000200)={0x3, 0x2}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video0\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000200), 0x0, 0x400}, {&(0x7f0000000240)="cc3f9ac797353373297889018cd7475aeee1389d8055c3927e83cbaa54f51ca1cc3495620a47793f9832e21d358c7655da62b5c8e30360e17aad05252a889508bd77b1e423c3af6ac069770345ef5e7fed5d2a62af58d462faf6c2177fd708abd62cafc8190933", 0x67, 0xffffffffffffa2cc}], 0x80000, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) [ 498.834955][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 498.854986][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:34 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x18) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 03:42:34 executing program 4 (fault-call:12 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 498.967655][ T26] audit: type=1800 audit(1567741354.074:160): pid=28875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=975 res=0 03:42:34 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x10000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:34 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2000, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) [ 499.334731][T28900] FAULT_INJECTION: forcing a failure. [ 499.334731][T28900] name failslab, interval 1, probability 0, space 0, times 0 [ 499.426976][T28900] CPU: 0 PID: 28900 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 499.434913][T28900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.444969][T28900] Call Trace: [ 499.448266][T28900] dump_stack+0x172/0x1f0 [ 499.452604][T28900] should_fail.cold+0xa/0x15 [ 499.457629][T28900] ? __f_unlock_pos+0x19/0x20 [ 499.462314][T28900] ? fault_create_debugfs_attr+0x180/0x180 [ 499.468126][T28900] ? page_to_nid.part.0+0x20/0x20 [ 499.473153][T28900] ? ___might_sleep+0x163/0x280 [ 499.478002][T28900] __should_failslab+0x121/0x190 [ 499.482926][T28900] should_failslab+0x9/0x14 [ 499.482939][T28900] kmem_cache_alloc+0x2aa/0x710 [ 499.482951][T28900] ? __kasan_check_write+0x14/0x20 [ 499.482969][T28900] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 499.502919][T28900] getname_flags+0xd6/0x5b0 [ 499.507432][T28900] getname+0x1a/0x20 [ 499.511330][T28900] do_sys_open+0x2c9/0x5d0 [ 499.515837][T28900] ? filp_open+0x80/0x80 [ 499.520089][T28900] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 499.526154][T28900] ? trace_hardirqs_off_caller+0x65/0x230 [ 499.531877][T28900] __x64_sys_creat+0x61/0x80 [ 499.536466][T28900] do_syscall_64+0xfd/0x6a0 [ 499.540970][T28900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 499.546851][T28900] RIP: 0033:0x459879 [ 499.550742][T28900] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.570342][T28900] RSP: 002b:00007f424c5f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 499.578759][T28900] RAX: ffffffffffffffda RBX: 00007f424c5f3c90 RCX: 0000000000459879 [ 499.586728][T28900] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 499.594701][T28900] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 499.602676][T28900] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f424c5f46d4 [ 499.610648][T28900] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000006 03:42:34 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x12000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 499.717419][ T26] audit: type=1804 audit(1567741354.824:161): pid=28873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/465/file0/file0" dev="loop0" ino=975 res=1 03:42:34 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000300)='jfs\x00', &(0x7f0000000340)='./file0\x00', 0x2, 0x1, &(0x7f0000000400)=[{&(0x7f0000000380)="896b6db50aea2893cf7131a72804df24fd82460d6eae7b8467ea981a2e1ab7ab36b47e45838475dab06ad5944364b22727d36b096a2e2d2c39f486f4841969adc751d30e0f798d9c", 0x48, 0x8}], 0x20000, &(0x7f00000005c0)=ANY=[@ANYBLOB='errors=continue,gid=', @ANYRESHEX=r1, @ANYBLOB="2c6f626a5f726f6c653d2d11f7"]) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0xc0000}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000002c0)={r4, r5}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x11400) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/policy\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, &(0x7f0000000640)={0x1, 0x7f}) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000080)=0x78) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r2, 0x12) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r4 = dup(r1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$inet6(0xa, 0x80003, 0x7) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r4}) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001480), 0x100002d8, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:35 executing program 2 (fault-call:12 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file1/file0\x00', 0x8000, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:35 executing program 4 (fault-call:12 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:35 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x14000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 500.042122][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 500.056002][T10330] FAT-fs (loop4): Filesystem has been set read-only [ 500.199701][T28952] FAULT_INJECTION: forcing a failure. [ 500.199701][T28952] name failslab, interval 1, probability 0, space 0, times 0 [ 500.244419][T28952] CPU: 1 PID: 28952 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 500.252341][T28952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.262393][T28952] Call Trace: [ 500.265681][T28952] dump_stack+0x172/0x1f0 [ 500.269997][T28952] should_fail.cold+0xa/0x15 [ 500.274594][T28952] ? __f_unlock_pos+0x19/0x20 [ 500.279264][T28952] ? fault_create_debugfs_attr+0x180/0x180 [ 500.285063][T28952] ? page_to_nid.part.0+0x20/0x20 [ 500.290072][T28952] ? ___might_sleep+0x163/0x280 [ 500.294906][T28952] __should_failslab+0x121/0x190 [ 500.299834][T28952] should_failslab+0x9/0x14 [ 500.304317][T28952] kmem_cache_alloc+0x2aa/0x710 [ 500.309146][T28952] ? __kasan_check_write+0x14/0x20 [ 500.314236][T28952] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 500.319774][T28952] getname_flags+0xd6/0x5b0 [ 500.324256][T28952] getname+0x1a/0x20 [ 500.328133][T28952] do_sys_open+0x2c9/0x5d0 [ 500.332534][T28952] ? filp_open+0x80/0x80 [ 500.336762][T28952] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 500.342811][T28952] ? trace_hardirqs_off_caller+0x65/0x230 [ 500.348518][T28952] __x64_sys_creat+0x61/0x80 [ 500.353087][T28952] do_syscall_64+0xfd/0x6a0 [ 500.357578][T28952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.363446][T28952] RIP: 0033:0x459879 [ 500.367328][T28952] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 500.386918][T28952] RSP: 002b:00007fe405c57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 500.395307][T28952] RAX: ffffffffffffffda RBX: 00007fe405c57c90 RCX: 0000000000459879 [ 500.403264][T28952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 500.411215][T28952] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 500.419164][T28952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe405c586d4 [ 500.427111][T28952] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000007 03:42:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x54ea, 0x2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xc7) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:35 executing program 2 (fault-call:12 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x4000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x8, 0x4000) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB="148e737d7b1667707d73008ad88571bc8404532214e75d679fd1280ea941a3e0758a4d3c550fe3e5a9fd5e91866860351d31675c491fec22cd0180496b3366f266741072ca0ee9dff28c7adece15ec7b4c0d54002dfa902e6336d7f83be5b64da23361e2793836f5ce58f493fd3c124db1cf67f68e04b4ad9b14ddfa1c4472150c7e76d23a4cc5e9610c661875bc00f9366a397e1933e383dd389ec361c56cd9688b2fed2bd0facbaba37cafdc3441de385e33c82af518e0150353455686d470c2d1b57d310b2f26205412031ae906310b2bf6153fb7", @ANYRES64, @ANYRES16, @ANYRESDEC]]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 500.679765][T28978] FAULT_INJECTION: forcing a failure. [ 500.679765][T28978] name failslab, interval 1, probability 0, space 0, times 0 [ 500.693132][T28978] CPU: 1 PID: 28978 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 500.701106][T28978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.711147][T28978] Call Trace: [ 500.714430][T28978] dump_stack+0x172/0x1f0 [ 500.718746][T28978] should_fail.cold+0xa/0x15 [ 500.723330][T28978] ? fault_create_debugfs_attr+0x180/0x180 [ 500.729127][T28978] ? page_to_nid.part.0+0x20/0x20 [ 500.734194][T28978] ? ___might_sleep+0x163/0x280 [ 500.739025][T28978] __should_failslab+0x121/0x190 [ 500.743939][T28978] should_failslab+0x9/0x14 [ 500.748424][T28978] kmem_cache_alloc+0x2aa/0x710 [ 500.753265][T28978] ? stack_trace_save+0xac/0xe0 [ 500.758093][T28978] __alloc_file+0x27/0x340 [ 500.762486][T28978] alloc_empty_file+0x72/0x170 [ 500.767227][T28978] path_openat+0xef/0x4630 [ 500.771621][T28978] ? save_stack+0x23/0x90 [ 500.775925][T28978] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 500.781707][T28978] ? kasan_slab_alloc+0xf/0x20 [ 500.786444][T28978] ? kmem_cache_alloc+0x121/0x710 [ 500.791452][T28978] ? getname_flags+0xd6/0x5b0 [ 500.796124][T28978] ? getname+0x1a/0x20 [ 500.800180][T28978] ? do_sys_open+0x2c9/0x5d0 [ 500.804744][T28978] ? __x64_sys_creat+0x61/0x80 [ 500.809503][T28978] ? do_syscall_64+0xfd/0x6a0 [ 500.814172][T28978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.820224][T28978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.826485][T28978] ? debug_smp_processor_id+0x3c/0x214 [ 500.831928][T28978] ? perf_trace_lock+0xeb/0x4c0 [ 500.836759][T28978] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 500.842113][T28978] ? __lockdep_free_key_range+0x120/0x120 [ 500.847810][T28978] ? retint_kernel+0x2b/0x2b [ 500.852379][T28978] ? trace_hardirqs_on_caller+0x6a/0x240 [ 500.857991][T28978] do_filp_open+0x1a1/0x280 [ 500.862471][T28978] ? may_open_dev+0x100/0x100 [ 500.867125][T28978] ? lock_downgrade+0x920/0x920 [ 500.871969][T28978] ? retint_kernel+0x2b/0x2b [ 500.876567][T28978] ? __kasan_check_read+0x11/0x20 [ 500.881571][T28978] ? do_raw_spin_unlock+0x57/0x270 [ 500.886662][T28978] do_sys_open+0x3fe/0x5d0 [ 500.891064][T28978] ? filp_open+0x80/0x80 [ 500.895297][T28978] __x64_sys_creat+0x61/0x80 [ 500.899896][T28978] do_syscall_64+0xfd/0x6a0 [ 500.904381][T28978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 500.910257][T28978] RIP: 0033:0x459879 [ 500.914138][T28978] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 500.933719][T28978] RSP: 002b:00007f424c5d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 500.942108][T28978] RAX: ffffffffffffffda RBX: 00007f424c5d2c90 RCX: 0000000000459879 [ 500.950064][T28978] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 500.958022][T28978] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 500.965969][T28978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f424c5d36d4 [ 500.973933][T28978] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000008 03:42:36 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1b000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:36 executing program 4 (fault-call:12 fault-nth:2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:36 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$int_in(r4, 0x5452, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x501180, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x5, 0x5, 0x1, "07da82e1da87ac79cc433d65db95b8b70b1289e0ba017d51090af73812ac26f2bcb9f8f6bd337d29feaf94fe284f9cf884d737b7b999a166db4d8138c91cc116", "a10d78c36e8152246a0bc58d03653ff51009cfbc2dc90b1b25a69c86f1eeb022e188c54acd5e3a10602ca549f4b7b583734de0ddfa021acf5d0b84a7aa2335ac", "105cd6596b503536da087b355edaac237c14da0cd0acda6b554067670190cdb9", [0x7, 0x9]}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r7}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:36 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000340)="adb81facbd9153282b0a08cfabcf1577f9c1db08f93103a00c15ac47c99716b8feab19653a21a64519c3740a40df4e130e82ba72a536fba6c588c827202ee489afdf3ce1a7e6d237bbb0ff1a0b15acd3a9130086c37e347931c9005b65b675f942f71d9c59303a4cd47eacc302926fc80d49b4e7ee15a942e6d0031b366dfc3dc5c283d4373446e72ac0e71a252784da60c44677959f8cfa65acf67dafa560877b8ecd5c2211431b434c493d6528234947352295c61546dcbc27c071b1091f55679330cc30cca2e88c3340", 0xcb, r0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0x4) fchdir(r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x2, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0xfffffffffffffff5, 0x6, {{0xb4a, 0x5, 0xeca2fc27bce92a94, r4}}}, 0x28) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 501.211498][T28982] FAULT_INJECTION: forcing a failure. [ 501.211498][T28982] name failslab, interval 1, probability 0, space 0, times 0 [ 501.255441][T28982] CPU: 1 PID: 28982 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 501.263368][T28982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.273423][T28982] Call Trace: [ 501.276715][T28982] dump_stack+0x172/0x1f0 [ 501.281137][T28982] should_fail.cold+0xa/0x15 [ 501.285730][T28982] ? fault_create_debugfs_attr+0x180/0x180 [ 501.291537][T28982] ? page_to_nid.part.0+0x20/0x20 [ 501.296567][T28982] ? ___might_sleep+0x163/0x280 [ 501.301425][T28982] __should_failslab+0x121/0x190 [ 501.306367][T28982] should_failslab+0x9/0x14 [ 501.310864][T28982] kmem_cache_alloc+0x2aa/0x710 [ 501.315708][T28982] ? stack_trace_save+0xac/0xe0 [ 501.320559][T28982] __alloc_file+0x27/0x340 [ 501.324969][T28982] alloc_empty_file+0x72/0x170 [ 501.329728][T28982] path_openat+0xef/0x4630 [ 501.334135][T28982] ? save_stack+0x23/0x90 [ 501.338458][T28982] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 501.344259][T28982] ? kasan_slab_alloc+0xf/0x20 [ 501.349015][T28982] ? kmem_cache_alloc+0x121/0x710 [ 501.354032][T28982] ? getname_flags+0xd6/0x5b0 [ 501.358707][T28982] ? getname+0x1a/0x20 [ 501.362775][T28982] ? do_sys_open+0x2c9/0x5d0 [ 501.367362][T28982] ? __x64_sys_creat+0x61/0x80 [ 501.372119][T28982] ? do_syscall_64+0xfd/0x6a0 [ 501.376791][T28982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 501.382858][T28982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 501.389091][T28982] ? debug_smp_processor_id+0x3c/0x214 [ 501.394550][T28982] ? perf_trace_lock+0xeb/0x4c0 [ 501.399397][T28982] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 501.404756][T28982] ? __lockdep_free_key_range+0x120/0x120 [ 501.410453][T28982] ? __this_cpu_preempt_check+0x3a/0x210 [ 501.416088][T28982] ? retint_kernel+0x2b/0x2b [ 501.420663][T28982] ? trace_hardirqs_on_caller+0x6a/0x240 [ 501.426294][T28982] do_filp_open+0x1a1/0x280 [ 501.430800][T28982] ? may_open_dev+0x100/0x100 [ 501.435455][T28982] ? lock_downgrade+0x920/0x920 [ 501.440291][T28982] ? rwlock_bug.part.0+0x90/0x90 [ 501.445221][T28982] ? __kasan_check_read+0x11/0x20 [ 501.450223][T28982] ? do_raw_spin_unlock+0x57/0x270 [ 501.455317][T28982] do_sys_open+0x3fe/0x5d0 [ 501.459720][T28982] ? filp_open+0x80/0x80 [ 501.463953][T28982] __x64_sys_creat+0x61/0x80 [ 501.468562][T28982] do_syscall_64+0xfd/0x6a0 [ 501.473046][T28982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 501.478920][T28982] RIP: 0033:0x459879 [ 501.482798][T28982] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 501.502377][T28982] RSP: 002b:00007fe405c78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 501.510775][T28982] RAX: ffffffffffffffda RBX: 00007fe405c78c90 RCX: 0000000000459879 [ 501.518741][T28982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 501.526746][T28982] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 501.534692][T28982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe405c796d4 [ 501.542639][T28982] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000004 03:42:36 executing program 2 (fault-call:12 fault-nth:2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 501.716484][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 501.780566][T11958] FAT-fs (loop2): Filesystem has been set read-only [ 501.851940][T29023] FAULT_INJECTION: forcing a failure. [ 501.851940][T29023] name failslab, interval 1, probability 0, space 0, times 0 [ 501.868551][T29023] CPU: 0 PID: 29023 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 501.876458][T29023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.886513][T29023] Call Trace: [ 501.889809][T29023] dump_stack+0x172/0x1f0 [ 501.894150][T29023] should_fail.cold+0xa/0x15 03:42:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dg~/\xf6(o\xe1t\r\x1as<\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) mmap$perf(&(0x7f0000c6f000/0x2000)=nil, 0x2000, 0x2000008, 0x10010, r1, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = shmget$private(0x0, 0x2000, 0x1800, &(0x7f0000ffe000/0x2000)=nil) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x8914487598fd164f) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) shmat(r2, &(0x7f0000a00000/0x600000)=nil, 0x3000) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 03:42:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000001c0)={0x7, 0x40400000000000, 0x7}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r3, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=""/113, 0x71}}, 0x10) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:37 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x3f000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 501.898752][T29023] ? fault_create_debugfs_attr+0x180/0x180 [ 501.904560][T29023] ? page_to_nid.part.0+0x20/0x20 [ 501.909586][T29023] ? ___might_sleep+0x163/0x280 [ 501.914440][T29023] __should_failslab+0x121/0x190 [ 501.919380][T29023] should_failslab+0x9/0x14 [ 501.923887][T29023] kmem_cache_alloc+0x2aa/0x710 [ 501.928744][T29023] __alloc_file+0x27/0x340 [ 501.933167][T29023] alloc_empty_file+0x72/0x170 [ 501.937931][T29023] path_openat+0xef/0x4630 [ 501.942345][T29023] ? save_stack+0x23/0x90 [ 501.946699][T29023] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 501.952507][T29023] ? kasan_slab_alloc+0xf/0x20 [ 501.957268][T29023] ? kmem_cache_alloc+0x121/0x710 [ 501.962292][T29023] ? getname_flags+0xd6/0x5b0 [ 501.967022][T29023] ? getname+0x1a/0x20 [ 501.971068][T29023] ? do_sys_open+0x2c9/0x5d0 [ 501.975645][T29023] ? __x64_sys_creat+0x61/0x80 [ 501.980395][T29023] ? retint_kernel+0x2b/0x2b [ 501.984962][T29023] ? trace_hardirqs_on_caller+0x6a/0x240 [ 501.990572][T29023] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 501.996005][T29023] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 502.001354][T29023] ? __this_cpu_preempt_check+0x3a/0x210 [ 502.007003][T29023] ? retint_kernel+0x2b/0x2b [ 502.011576][T29023] ? __alloc_fd+0x487/0x620 [ 502.016057][T29023] do_filp_open+0x1a1/0x280 [ 502.020545][T29023] ? may_open_dev+0x100/0x100 [ 502.025203][T29023] ? lock_downgrade+0x920/0x920 [ 502.030030][T29023] ? rwlock_bug.part.0+0x90/0x90 [ 502.034945][T29023] ? __kasan_check_read+0x11/0x20 [ 502.039951][T29023] ? do_raw_spin_unlock+0x57/0x270 [ 502.045054][T29023] do_sys_open+0x3fe/0x5d0 [ 502.049451][T29023] ? filp_open+0x80/0x80 [ 502.053672][T29023] ? retint_kernel+0x2b/0x2b [ 502.058332][T29023] __x64_sys_creat+0x61/0x80 [ 502.062902][T29023] do_syscall_64+0xfd/0x6a0 [ 502.067392][T29023] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.073297][T29023] RIP: 0033:0x459879 [ 502.077175][T29023] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:42:37 executing program 4 (fault-call:12 fault-nth:3): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x8000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/39, &(0x7f0000000080)=0x27) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 502.096802][T29023] RSP: 002b:00007f424c5f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 502.105200][T29023] RAX: ffffffffffffffda RBX: 00007f424c5f3c90 RCX: 0000000000459879 [ 502.113155][T29023] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 502.121239][T29023] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 502.129188][T29023] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f424c5f46d4 [ 502.137187][T29023] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000007 03:42:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x4, 0x0, 0x9, 0x101, 0xd, 0x2, 0xd714, 0x5d3, 0x8001, 0x0, 0x9, 0x9}) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:37 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5, @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRES64=0x0]) r6 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r6}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:37 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x40000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:37 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000001c0)={0x2, 0x6, 0x80, 0x4, 0x400, 0x8, 0x4}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 502.803298][T29065] FAULT_INJECTION: forcing a failure. [ 502.803298][T29065] name failslab, interval 1, probability 0, space 0, times 0 [ 502.857305][T29065] CPU: 0 PID: 29065 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 502.859494][T29069] FAULT_INJECTION: forcing a failure. [ 502.859494][T29069] name failslab, interval 1, probability 0, space 0, times 0 [ 502.865224][T29065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.865229][T29065] Call Trace: [ 502.865258][T29065] dump_stack+0x172/0x1f0 [ 502.895439][T29065] should_fail.cold+0xa/0x15 [ 502.900024][T29065] ? fault_create_debugfs_attr+0x180/0x180 [ 502.905830][T29065] ? page_to_nid.part.0+0x20/0x20 [ 502.910848][T29065] ? ___might_sleep+0x163/0x280 [ 502.915695][T29065] __should_failslab+0x121/0x190 [ 502.920625][T29065] should_failslab+0x9/0x14 [ 502.925123][T29065] kmem_cache_alloc+0x2aa/0x710 [ 502.929969][T29065] ? stack_trace_save+0xac/0xe0 [ 502.934815][T29065] __alloc_file+0x27/0x340 [ 502.939223][T29065] alloc_empty_file+0x72/0x170 [ 502.943983][T29065] path_openat+0xef/0x4630 [ 502.948391][T29065] ? save_stack+0x23/0x90 [ 502.952723][T29065] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 502.958520][T29065] ? kasan_slab_alloc+0xf/0x20 [ 502.963275][T29065] ? kmem_cache_alloc+0x121/0x710 [ 502.968291][T29065] ? getname_flags+0xd6/0x5b0 [ 502.972959][T29065] ? getname+0x1a/0x20 [ 502.977022][T29065] ? do_sys_open+0x2c9/0x5d0 [ 502.981603][T29065] ? __x64_sys_creat+0x61/0x80 [ 502.986358][T29065] ? retint_kernel+0x2b/0x2b [ 502.990944][T29065] ? trace_hardirqs_on_caller+0x6a/0x240 [ 502.996587][T29065] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 503.002058][T29065] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 503.007432][T29065] ? __this_cpu_preempt_check+0x3a/0x210 [ 503.013062][T29065] ? retint_kernel+0x2b/0x2b [ 503.017646][T29065] ? __alloc_fd+0x487/0x620 [ 503.022152][T29065] do_filp_open+0x1a1/0x280 [ 503.026651][T29065] ? may_open_dev+0x100/0x100 [ 503.031329][T29065] ? lock_downgrade+0x920/0x920 [ 503.036176][T29065] ? rwlock_bug.part.0+0x90/0x90 [ 503.041115][T29065] ? __kasan_check_read+0x11/0x20 [ 503.046133][T29065] ? do_raw_spin_unlock+0x57/0x270 [ 503.051251][T29065] do_sys_open+0x3fe/0x5d0 [ 503.055668][T29065] ? filp_open+0x80/0x80 [ 503.059916][T29065] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 503.065980][T29065] ? trace_hardirqs_off_caller+0x65/0x230 [ 503.071701][T29065] __x64_sys_creat+0x61/0x80 [ 503.076290][T29065] do_syscall_64+0xfd/0x6a0 [ 503.080886][T29065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 503.086767][T29065] RIP: 0033:0x459879 [ 503.090660][T29065] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 503.110273][T29065] RSP: 002b:00007fe405c57c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 503.118681][T29065] RAX: ffffffffffffffda RBX: 00007fe405c57c90 RCX: 0000000000459879 [ 503.126648][T29065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 503.134622][T29065] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 503.142592][T29065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe405c586d4 [ 503.150558][T29065] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000006 [ 503.158576][T29069] CPU: 1 PID: 29069 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 503.166466][T29069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.166472][T29069] Call Trace: [ 503.166492][T29069] dump_stack+0x172/0x1f0 [ 503.166518][T29069] should_fail.cold+0xa/0x15 [ 503.188710][T29069] ? fault_create_debugfs_attr+0x180/0x180 [ 503.194519][T29069] ? page_to_nid.part.0+0x20/0x20 [ 503.199551][T29069] ? ___might_sleep+0x163/0x280 [ 503.204402][T29069] __should_failslab+0x121/0x190 [ 503.209336][T29069] should_failslab+0x9/0x14 [ 503.213820][T29069] kmem_cache_alloc+0x2aa/0x710 [ 503.218660][T29069] security_file_alloc+0x39/0x170 [ 503.223666][T29069] __alloc_file+0xde/0x340 [ 503.228096][T29069] alloc_empty_file+0x72/0x170 [ 503.232850][T29069] path_openat+0xef/0x4630 [ 503.237249][T29069] ? save_stack+0x23/0x90 [ 503.241560][T29069] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 503.247358][T29069] ? kasan_slab_alloc+0xf/0x20 [ 503.252099][T29069] ? kmem_cache_alloc+0x121/0x710 [ 503.257105][T29069] ? getname_flags+0xd6/0x5b0 [ 503.261761][T29069] ? getname+0x1a/0x20 [ 503.265808][T29069] ? do_sys_open+0x2c9/0x5d0 [ 503.270376][T29069] ? __x64_sys_creat+0x61/0x80 [ 503.275121][T29069] ? do_syscall_64+0xfd/0x6a0 [ 503.279778][T29069] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 503.285833][T29069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.292057][T29069] ? debug_smp_processor_id+0x3c/0x214 [ 503.297498][T29069] ? perf_trace_lock+0xeb/0x4c0 [ 503.302330][T29069] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 503.307681][T29069] ? __lockdep_free_key_range+0x120/0x120 [ 503.313379][T29069] ? retint_kernel+0x2b/0x2b [ 503.317947][T29069] ? trace_hardirqs_on_caller+0x6a/0x240 [ 503.323557][T29069] ? retint_kernel+0x2b/0x2b [ 503.328122][T29069] ? trace_hardirqs_on_caller+0x6a/0x240 [ 503.333732][T29069] do_filp_open+0x1a1/0x280 [ 503.338222][T29069] ? may_open_dev+0x100/0x100 [ 503.342882][T29069] ? lock_downgrade+0x920/0x920 [ 503.347708][T29069] ? retint_kernel+0x2b/0x2b [ 503.352282][T29069] ? __kasan_check_read+0x11/0x20 [ 503.357282][T29069] ? do_raw_spin_unlock+0x57/0x270 [ 503.362382][T29069] do_sys_open+0x3fe/0x5d0 [ 503.366781][T29069] ? filp_open+0x80/0x80 [ 503.371004][T29069] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 503.377054][T29069] ? trace_hardirqs_off_caller+0x65/0x230 [ 503.382752][T29069] __x64_sys_creat+0x61/0x80 [ 503.387320][T29069] do_syscall_64+0xfd/0x6a0 [ 503.391804][T29069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 503.397672][T29069] RIP: 0033:0x459879 [ 503.401556][T29069] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 503.421139][T29069] RSP: 002b:00007f424c5f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 503.429525][T29069] RAX: ffffffffffffffda RBX: 00007f424c5f3c90 RCX: 0000000000459879 [ 503.437477][T29069] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 503.445438][T29069] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 03:42:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) dup(r0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x120, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x440) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 503.453386][T29069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f424c5f46d4 [ 503.461335][T29069] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000006 03:42:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) io_uring_setup(0xc81, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x19e}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:38 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 503.726891][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 503.757373][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:42:38 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x80040000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:39 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x40000) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000180)={0x1, 0x0, {0x5, 0x100000001, 0x2018, 0x3, 0x5, 0xf, 0x0, 0x6}}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_elf64(r2, &(0x7f00000014c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x8, 0x1, 0x5, 0x7f, 0x922b9117ce68736, 0x6, 0xcfd, 0x8e, 0x40, 0x1af, 0x95, 0x3d26c633, 0x38, 0x2, 0x5, 0x4, 0x100000001}, [{0x6, 0x0, 0xfc0000000000, 0x3, 0x9, 0x0, 0x18000000000, 0xffffffff}, {0x6, 0x1f, 0x0, 0x3ff, 0x42a9b2a4, 0x20, 0x3, 0x3}], "9e3ea863f953db048284ad11b356252001b7bcd069cee1bcf504be4cb4346b8ffeb235d0d0942311e1b3ce4520244648650cf4ecfd5642fc47993d7f6df1d373bd36524fefb1ef8c2d74ed851bb879d903b70159d1fabfdd567d9bbc5b3cac5c1ab66dc8260bb2d7b692fb78c20c190867601f443b57f203234cc9726d160be1d8dd10e04f2070d41b1e533ef2ef09c21c7dafbb6c79b7270da4dd56d5c8f8e40c22c1e9aba19316537ab807eea0f46f1ce394535305c922cc39ec3a4975f3a33aa78b3803a8f86b058904e6c30885dede0aad54921822b2c3ff8b5b99ddd96798e80ff20683e42a07ab2162f3a34c6f12ded91d42b2e93f302ae6a6c5e5af2e398eb1102d6586b4821dc7c4354d8f145fe822e1c725dce190770c6187d17d5412a8fbd3b4c9d9a1d69cb7be7dc549a3e127671045d948f09082987191a5927c5f565b0059ee3f7fb83362e3cb96d16a3e2bdb60b636a42d1bd2c6e7963aa5a882312a3a0b706870884bc96c352c0cf670b49a4154a3a172822905fd47533bc1a798c9a37c40b91f992cf73ed4269f6e4390476803200401b7759dce10faed10d487dc6498efdbde6da287300d1042787af015bf85b58214e4f1ccfc4352aa3448691f162b7165946834e4440e5ada48712daf8e82350583d63882ee58f5f7bd9a3aca84caa8e109af8f4db47e4497aab40227d34aa1c6a6a713658ed2d382583fb851e31c0a2ad90ce2b8c685e7bff1c2611bb4f9dfb5a29a282f7ad11565acf571ad9b250886a4471c569beb6cb40003c359973002c7f6373e1f7ec304440665b80dc3f528f92dfe1bf3b7d4b7e9a5d3c5cb77f64bb67bc36cbc1ab861a770a8e68fd5b4923b27b1c8e3793dbb5aa7603e029308ed2d5e7546977da0a1bc0aa8a6846bd578b48326506e26228e9ba0ce9b84c7fabf3c01b9d6ab6430a89a5ca596e0371af3ac3176a4fab98789d3f1c7d5e0ae5e57cc325b085fe36cb96c5c2ee8b93ccb378d39a6df6a8e095c5a119567ad5a6d1d7588e132a7515a1a3bb325820dfeaff20a21a22a7675de62b8133a49f536fe81d0efae8ce5227d7629a3cc76ebd375deb819215f1b542fc7429e3bd30ba5e8e52df713f91d013b798afa984d9a1e5cf24aba2b9f0ef38256f443b7a2c540b347bb4aa4d377ef78c4d44de812b65f1b152dcea159a11222107457e43ed65076df672a58e4c2b89d83e5223484d6f8dd7dff38988b31f26847750758cbc756fa9073cb9fbe296b4bba106d505c12b65ce28e03fa2c051543ea449d310fb6c9441d684505bfc2ffccb40afaf7299cdeb53a3ef5341bba77fb0112d88881f7976ebf20c7043c8c91f32d325522f20fec1ec6c8557e2574940f78afdd11c92a0edf6daa1062acdcb1e2441e02aa5f0b299b273d0eb5d8717b78fa887f436ceb101fb4f3c2973ff8876fcb738c9a17ae8d25da603d9136bdf232bfeea494e2357088f7f29c0bee5c5ea6d9fc8a085bea36164d7a952bf73d2b5c16c1fc2748dc1c54617621f2ad8d66e879148f7d812790e895516bd9f187f534106e884f10e60001e1bcd4e107e873e5a468b30f3621f25ba0b8740c10ab47a05c74a8844f38d0d8921f9a60c8060208cdf46a780566ec5f8035bbe8f55914d800bb1330aaf342b923d8c64119aac81987f0aa563fd3acf23d4b6760f97696b7b55addc0c2a1932a6cb50262f13673d8a272babf1856ab29a9e7d290e8b6c94d4ed49294258517da4b243d9b16a31435cc8357849634ff8694f0d160d0d3ff3f7de5ec9d2f2605e8d829f6e5603da22313562e1524a30504cbe66a6791f9801042bd3a617bc50ce5f20cbb45f0192aac9f1c1d8c4e1e00a81631997c757d65bb01eb92f2b5b658548cd65bc8d248984598c9e77e34478c0f5e83184b69236bc9a08c4fd973b82611b884fff7be13056b5db43aff3ae35bdeb9fbdd34fd5c173b2843a3871bdc0ad88897cb6d2912e6c12b570df51e6d95c3224c4a396ebb8859fc11ac0d3e4519341bcbd98e5fe5d2d8ac4da426e6090e57e6f27a20e22bcdd88ddfd5e82c90498c5968a34b22b2131a9dd88e6297bb7e102aa54e8e94e39fba4da9ca85866e503c9d758690b95301845dbb25eea6dce2f9684e1e6aa02be7fe7a69b5673a60791defd9f59023d09fb34978dc15390ddc3f27ce5e119fd838a435ecdfaf0cbb11c42493eaa6f322ecad4398e02d7068e4d2ad478ae1b98529a35b7d2de7b75cfe6d5326934658275fa9d90396f1fddf517f919a8b34394ec193ce170d546945664002201a5744f092373c2d27668700dd0071f61535b5b146c55a01481d34ab6c53d15607cb905b02f138b24bff7152f258521ec3c3ab556efd82277e56d23ac2f739443ff8c7d5a4026d8b8e2e34ce2eae8586a4cb165519e247359db40ce70af014bbd482085611714141ef0c0a1febe945cd75b4f66a52708f455ddd9b6793102fc506179497eb6cafb721cfeb73ced171585d7ceace2b023f71ebcfe2e99506d22f90381569456fef24bff43ae752b769573aef06ba88550d27399fb6cc3848f52a304f4812b0db16f0abf706b8e4bbabf723d25cbc6f3b82d62c05b287422ff7ebe3a185cebaf526b301c41bb6e3925e258764195866dd8ec5a1c51803c82aa98880ec72dc72d4eafc2d31f86e4932266d87ac50c501d5f5768ea22b93e5d00d2d3b064edf5de6e1788e963b355483846bd27d48f51604ddcaa501b5c9a67f2eade6960b449a07c769a5b39d5e49217a5190a81b339e458ebc6501e65ae0e733847e63df1bc177968234d89768c6c4ecf1f0d1de209239b5e4c80ae814f77381113b9ec7dd2b7dc79c3b7b4b312bb65d79ff75d21df0e87d5bc5601505a7ea9c4be7bc61bda7d750e397d2d8f1417cf84d4f7263e242d34ec50dec848374ab1f0ca25da119d4252e9c8ad05b35dd62ed43b8c433e7cdfe84e076326657f481303187dd255e40cdf6a7c5d2e19581ab7e165584cc6ccd355edb1b3c2495d4d36c54b5ab35b80bb0566bdbdbd3f443f0f808991fc4aa80a8c1c9ac3aec09336ec510137bce3d72446dd5a4fe0b0f669318980ff58b7782b8640f5f45f33aa3a8a918b22ba4a89ff00773bba2e10749381abae120e4cdd7681ed4bd0ff8039e4c4295a9d499ae6ada72b623ec02c45b51dd48ba331425e01b79df9f698404bb981af3bd812ce111caec01e4395cdb6c499144d4e6f436dbaea545f30eb60d2864fb9c72c64a761f5e740c89f92e43b42d704116fd127ba0ef0ded97a4b9e3e15538cccf58c9755483143dd1170b706dba7994c199c7f48a646b8b7a2638ef450c27f35a4d5c1e547db6a6b062a6352865da8dae72ac51607f3ee277a7bc779b53da0e4e6aee11dbbd591ecf5524764c3d2aa743bc65bd0e19d88f0b92a80b3c381a2858e232758696986cc1b2f2d1c5df65e9e270373e78f41b9adb56864d3f5e7efb3994c4456da86c66d37bfcd6cc02cd317dcb830a852eb6a939d3a6a931f2c09aa753fc56a2c1654c06b57e4236c4b9ca41fa999a845f5100594e7fe894687f194e0812710cc2930876db9fd8874003ec70067743e6ee9491029902035a9bf778dae02b8e3da2184af9906c002fa2b58b458ef9e9bcae1bd90e70540e2be7b2eea5f519d3f3377141c52f0c80a8cd46289eae785baf0968dd48b92c03e3eecbb4338876f3715101a706c55763a5a38626682d6a4d07d2d97b06c6674d1fc5b1c14a0f305428b063d6b44f98fdf393a12981b24d31e52a82670b54d999226b4acc04e4d63ae33cb6626066c7856d2a7cd3ed8bca00740a770e9f280ae753f510edc608ce780b6f9ce06dbceb08f8be74d4800500927bcb8387a2f810d1a9395683dcb2848fbbdb9a91840cc8e9992afa5aba6bfe7dfe638b1186f3bfb2b0fbd5cd4510370cdff235f5ff645ee67bac008e0fd980952a71d1f34e691543803158b51814ae1633ed625034e3a14b3b7456d998beae03f75c76d55af1940b4d71385f5fde3d64c42e643ec51034af6008306c22b91bfaef6d1611aa4933c818c2c104a9cb9089259c0a4c16a495994c7532a09b27be51a21697f4b5bdd37fc8a140f8edb3a489ab7bdf6275350a1c7b8f07c7bf5d8bd043359efa7a6e337a522b6070814a27a1b4f968537f17c447539b000b65ccd8609e4fc7308898550d91941ed7214aaa1f7d2bb02771455d324d2d83bf6073592ff84a5113872934875cd3cdc33f6e17dc4fd4ea53ddc76e5c0fd3e0993f426f92a8936ba5242c170422b453523dede1841497d04dc479c4859116e5b73d7d4eb001fa8c104c86b29e44faa83922d31fed3d96d7a56e4b3fe2454d63d6819b1f3345ea969b24db8dd33efc0ffd2d951550c55ca87c8bd934cad0073b7959f979c1c4162fbd8d45f8c917df227e75352a27bc82758cec4a22bb081baf310a200e7678ba2d0de619a7ef3544ed0c80c7b6fcf4ba61908422bd02227e2c8687e69d6038c754edd3c94335042d7eacbcd9307f07b477642a87eedb489954ff1ffaa5d6aa1dd6b00dab1aa8361e4f3394dcbf4ab29ff6cef5e0fcfbb117bb87048c97b1f156a6b6edd8937cf8feefcecf90c782e05b2105632026271bfdfc4f758c9ffc06d13bf5a7b76090c8599fe47e167c53cf5ff6cb0becb1842f9e8840de07ed568f8ba66f75ce60187aa203acc00cf55a1f9edaf9cd388eab5cb9ce283f23659ab9c11e7a9d7f1ce91b9bd13f88052ada0fdf7b1ba7ecc427fd3956c9692c1213b4506e2f6f4b8be5c6a5d48089910658b3f90c2e22ec2c7475186d3158f5ca55998e76c3f6018da2ec61d1c746b8374264db0a62f08865e3648b1d86cb2ecaad586a90bc82192d0a745add8c64c44b628e9c0519fe0779a33e3499a165d7d31fec1ec522ae5e4f079e0a9dfdcab084cb72b56aed54a245671e69beeb5a532e61614993ac8bc95fc49cf110a83ba915432cd0b91bebf8f50e0cffc5af2b5a600ab77e559b74979b78537c6e7e999c2e54f66e25bb0d6cffb32bc86505b057771aa2968f7e6461f943194d76a98b88266b813fb317b5d201ad46fe61641f193ceda571b1622201bfea7e297c0e9757ffb46fa414fc410cdb2bbcfb351181f898d36e7a84a047bef1e7db508c94b74bb026aa859d32a834d01cfbab5d12fed8420752400959b4d48a706e1e518f0578e308eb7034e50f36e3d2f04f37526366ec7c2cfb762f3d7e5ca4df74894a1ce07f8f0900e71b95b6e4fd11afd33686dd860f78be5a935ff7d0918360b30fd690ff8fa261aab26cd01958234e3ca71ed826fc85a0c25107fc927aab0b753fb2114f221cc3da18ce48cc8243c877988fd8094e0a81be8de52f2df93c8bac81885bda68bf2fe380236372e411a77b8e793f73d872cd1e3366271535d27bfbf9e270a229b99964855f605cab5bd4d57b35223a18c227f6a1f0484ffaab35cc30f4e69b1c48c67715834928dbe77b78f19a36530686ab99bcb4a29ca4845ce0b427fe4b67326445908cf943218663916a9ba5a140b251f51301094c4bbeff581d1ff33262a52d3ad6914280e72a3d4790b26b129cc90aebd1642b1ffe6dc28fc0588e41fb5ba8161e1c02a559dd363ef3772ef434e0772f5767219baaa2e6305dc88c363a0884ec7c7f8b6b46a9f0920b04a0e5981e1825a1b3f97306baf415825f551b8bd89003b3d96de0f706c992416e7dbea78dac7f5c31fc5340dc2055dc5cda3a98ea109bbc945ed36b2ed62c12585c7bc686855191de736a11eeaea5453efd0be68edcbb73d5", [[], [], [], [], [], [], []]}, 0x17b0) socket$tipc(0x1e, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) syz_open_dev$swradio(&(0x7f0000000640)='/dev/swradio#\x00', 0x0, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88ab6ee8a04184a7}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=@delsa={0x228, 0x11, 0x400, 0x70bd25, 0x25dfdbfa, {@in6=@loopback, 0x4d6, 0x8, 0x6c}, [@tfcpad={0x8, 0x16, 0x2}, @policy={0xac, 0x7, {{@in=@broadcast, @in=@multicast1, 0x4e20, 0x0, 0x4e22, 0x2, 0xa, 0x120, 0x20, 0x2b, 0x0, r3}, {0x2322, 0xffffffffffffffff, 0x198b, 0x8, 0x5, 0x1000, 0x5}, {0x3, 0x3, 0x1000, 0x6}, 0x400, 0x0, 0x0, 0x0, 0x2, 0x2}}, @etimer_thresh={0x8, 0xc, 0x30aade09}, @algo_auth={0x144, 0x1, {{'crc32c-generic\x00'}, 0x7d0, "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"}}]}, 0x228}, 0x1, 0x0, 0x0, 0x8000}, 0x40040040) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 03:42:39 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 503.918412][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 503.927046][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:39 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x2) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:39 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xe2010000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 504.381109][ T26] audit: type=1804 audit(1567741359.494:162): pid=29122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/469/file0/file0" dev="loop0" ino=982 res=1 03:42:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x80000) preadv(r3, &(0x7f00000004c0), 0xbe87860e158a27e, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:39 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f00000001c0)}], 0x4, &(0x7f0000000580)=""/242, 0xf2}, 0x3fd8}, {{&(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/142, 0x8e}], 0x5, &(0x7f0000000a40)=""/242, 0xf2}, 0x7ff}], 0x2, 0x20, &(0x7f0000000bc0)={0x77359400}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x1) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') 03:42:39 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x3) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:39 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xf6ffffff) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480), 0x0, 0x800000000000) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r3, 0x1, 0x0, 0x369e5d84) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={0x0, 0x19, 0xb}, &(0x7f0000000380)=ANY=[@ANYBLOB='enc=oaep hash=vm\x00\x00\x00\x00(seed-generic)\x00'/78], &(0x7f0000000400)="ad70dcf404f40d8b9f8d1099e0fbd08baa611e64271c9eaf93", &(0x7f0000000440)=""/11) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000001c0)=0x78) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video0\x00', 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:40 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfeffffff) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000002c0)={'hsr0\x00', 0x200}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x19) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xa050}, 0x4000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:40 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000240)={0x54d5, "5f5cb2c6f4335be8318927936501fb5df2a59cac5297963b1f75242c1731eb5a", 0x2, 0x1404, 0xc13, 0x9, 0x4, 0x2, 0x9, 0x1}) socket(0x0, 0x0, 0x0) getpeername$ax25(r2, &(0x7f00000001c0)={{0x3, @default}, [@null, @remote, @default, @null, @bcast, @null, @null, @netrom]}, &(0x7f0000000340)=0x48) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getgid() setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}, {}]}, 0x3c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x9000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mkdir(0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26, 0xbd5359ea75117dd1) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file2\x00'}, 0x6e) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x1e000) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) preadv(r3, &(0x7f0000001480), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:40 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x2f9) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x2cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x101, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x81}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 505.497059][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 505.506805][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:40 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xff000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="89f5128b7147b4aae2a0d6e93636bf464ad2aba7edcd6e6f8c89c258dcdff4081cb6f78859970c8f2df9973dc92e8dcbf9384c6b1a17a30aded3078b576a19342a2eca79e5701a80214fe6de646a570ddabee8b225d9b20f8f3afddb5e7f088f6ef15a4c744ef4e6a9b3368092e9c9ddab28e9b5eca5bb6d8ce2842a", 0x7c, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$reject(0x13, r4, 0x100000000, 0x9d6, r6) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000100)={{0x2, 0x2, 0x7fffffff, 0x2, 0x2}, 0x0, 0x2}) [ 505.999173][ T26] audit: type=1804 audit(1567741361.094:163): pid=29277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/379/file0/file0" dev="loop2" ino=989 res=1 03:42:41 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfffff000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:41 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 506.062429][T29264] overlayfs: workdir and upperdir must reside under the same mount [ 506.145849][ T26] audit: type=1804 audit(1567741361.114:164): pid=29239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/379/file0/file0" dev="loop2" ino=989 res=1 03:42:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x27}, 0x67}}, 0x1, 0x9, 0x2, 0xb7fc, 0x7ff}, &(0x7f0000000080)=0x98) getresgid(0x0, &(0x7f0000000400)=0x0, 0x0) setgid(r4) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={r3, 0x1}, &(0x7f00000002c0)=0x8) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1800008, 0x80010, r2, 0x39) 03:42:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2010, r3, 0x10) 03:42:41 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 506.247887][ T26] audit: type=1804 audit(1567741361.214:165): pid=29305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/472/file0/file0" dev="sda1" ino=16657 res=1 [ 506.515141][ T26] audit: type=1804 audit(1567741361.624:166): pid=29281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/437/file0/file0" dev="loop4" ino=991 res=1 03:42:41 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfffffff6) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:41 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 506.682638][ T26] audit: type=1804 audit(1567741361.794:167): pid=29340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/380/file0/file0" dev="sda1" ino=16532 res=1 03:42:41 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') 03:42:42 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfffffffe) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r1 = dup(r0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:42 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:42 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x6) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 507.412817][ T26] audit: type=1804 audit(1567741362.524:168): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/473/file0/file0" dev="loop0" ino=993 res=1 03:42:42 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x7, 0x80080) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0='bpq0\x00', 0x10) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x80) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 507.442610][ T26] audit: type=1804 audit(1567741362.524:169): pid=29388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/473/file0/file0" dev="loop0" ino=993 res=1 03:42:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x1f, 0x1, {0x2, 0x3, 0x1000006d5f, 0x0, 0x1}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x2, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) [ 507.555618][ T26] audit: type=1804 audit(1567741362.664:170): pid=29366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/438/file0/file0" dev="loop4" ino=996 res=1 03:42:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000180)=""/112) 03:42:42 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x20000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 507.771597][T29413] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 507.861686][T29413] FAT-fs (loop4): Filesystem has been set read-only 03:42:43 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xf0ffffffffffff) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) close(r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x4000000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000180)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death], 0x6c, 0x0, &(0x7f0000000200)="575917e54352ce6facf86a44403c990762d8138ffe04688b68d3efe69962f945e5a1dca3bb4606b1ee82547047e97b8eb7462f79f539a5f7aca6b43f91a912b99337db3d5c0519df223b28224e82c4ce38d828f0eac2a5d0509769bf71c2b80d29f81c3c67ffa13da2520f28"}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x30801, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000080)) lseek(0xffffffffffffffff, 0x0, 0x3) 03:42:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhos9\xc7\xd2!t\x00', 0x2, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000400)='/dev/md0\x00', 0x40000, 0x0) fallocate(r1, 0x0, 0xd8, 0x6) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000005c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r4, 0x6}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r5 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r5}) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/104, 0x68}, {&(0x7f00000016c0)=""/112, 0x70}, {&(0x7f0000001740)=""/17, 0x11}], 0x4, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x7d, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0x10) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r10, 0xab00, r5) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={r9, 0x5f, 0x30}, &(0x7f0000000200)=0xc) r12 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$BLKROTATIONAL(r12, 0x127e, &(0x7f0000000340)) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) r14 = syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x228800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r14, 0x40605346, &(0x7f00000000c0)={0x0, 0x7, {0x0, 0x2, 0x374, 0x0, 0x3}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r13, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$RTC_ALM_SET(r13, 0x40247007, &(0x7f00000003c0)={0x3, 0x1a, 0xf, 0x1a, 0x3, 0x76ac, 0x0, 0x8c}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000240)={r11, 0x3, 0xc41}, &(0x7f0000000280)=0x8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x0, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x6, 0x280a01) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="87df8d56d2538980efd9aec8a832785b42c568d3cf237ba2edc526365a24e884c1b51446af976dec2a3f46172aa309ccf105b6e82dd4a80d3fd9e8df043e5bc025ccf03ff9f1e363994c3beb68a37694df") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 508.408588][ T26] audit: type=1804 audit(1567741363.514:171): pid=29463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/382/file0/file0" dev="loop2" ino=999 res=1 [ 508.495650][T29467] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 508.508037][T29467] FAT-fs (loop2): Filesystem has been set read-only 03:42:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:43 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x7) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:43 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x100000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000280)={0x1, 0x2, [0x4, 0x5, 0x1, 0x6, 0x7f, 0x1, 0x3, 0x6]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', r5}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, r5, 0x1}, 0xc) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r6, 0x800443d3, &(0x7f00000001c0)={{0xfffffffffffffff8, 0x0, 0x10001, 0xfff, 0x2, 0x3}, 0x7, 0x0, 0xffffffffffffffff}) 03:42:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x102, 0x2, {0x2, 0x8000, 0x8, 0x48}}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:44 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x2, {0x80000000, 0x4, 0x8, 0x1000}}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsetxattr(r3, &(0x7f0000000240)=@random={'user.', '\x00'}, &(0x7f0000000280)='\x00', 0x1, 0x1) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:44 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x8) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:44 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x200000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/69}, {&(0x7f0000000040)=""/51}, {&(0x7f0000000200)=""/192}, {&(0x7f00000024c0)=""/4096}, {&(0x7f0000000300)=""/154}, {&(0x7f0000000540)=""/231}], 0x112, 0xfffffffffffffffe) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2, {0x7ff, 0x7ff, 0x9, 0x40}}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) syz_open_procfs(r2, &(0x7f0000000000)='oom_score\x00') 03:42:44 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) fsetxattr$security_ima(r2, &(0x7f0000000540)='security.ima\x00', &(0x7f0000000580)=@sha1={0x1, "221e441c5318dcd8a97ca2fe4cd1dcdde8348cd8"}, 0x15, 0xfa764378871b49c0) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r6, 0x28, &(0x7f00000003c0)}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000240)=[@decrefs={0x40046307, 0x2}, @free_buffer, @clear_death={0x400c630f, 0x3}, @decrefs, @dead_binder_done, @enter_looper, @decrefs], 0x93, 0x0, &(0x7f00000002c0)="23f5bfbd36ac30580530e7d46094bd0dd526cb9e0180e3e32eb29b1795f0b083764fcfc734005ce2dd5806f395de8dd6a38fef3c36297da81a6e7fe27e9957c76ffdd8075e023e003fcde67fac17ac290c0666e2083e84609a8e404d4e0364fccb1a857b475bffedca42c4ec51f6033ded5de0dabfd0ffc0ab22a63ac23d17d2ef470f1f9fe1b7e2788090f4b4c8d8fe9e8eab"}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000200)={0x6008}) preadv(r4, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:44 executing program 4: mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) pkey_alloc(0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x8080, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000240)=""/109, &(0x7f00000001c0)=0x6d) 03:42:44 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x33) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:44 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x300000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000000)={0x3, 0x2, [0xfffffffffffff000, 0x3, 0x8000, 0x401, 0x9], 0x7}) [ 509.698313][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 509.698327][ T26] audit: type=1804 audit(1567741364.804:173): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/475/file0/file0" dev="loop0" ino=1004 res=1 [ 510.062859][ T26] audit: type=1804 audit(1567741365.174:174): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/441/file0" dev="sda1" ino=16579 res=1 03:42:45 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000000000005fbeb60eb2eca1730c386cf64115a3173a95f1792d6a1fb9128f26ba5ed1c77ecd4905d364c85ce04f3cf1e90166601c018b0e9c854b5a195751896331224f74e4fda383191878c47d06bea3588b901945ff7779be5463"]) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000340)={0x5e, @multicast1, 0x4e22, 0x0, 'sed\x00', 0x0, 0xfffffffffffffffd, 0x6d}, 0x2c) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00') socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:45 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x680c02, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0x1c) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000180)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsetxattr$security_smack_transmute(r3, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x1) 03:42:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) dup(r1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x56, 0x4, 0x6}, 0xdd}}, 0x18) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:45 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x10c) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:45 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x400000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x50e40, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x8000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) [ 510.294961][T10317] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 510.303736][T10317] FAT-fs (loop0): Filesystem has been set read-only 03:42:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80, 0x100a0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{r1, 0x0, 0x2000, 0xfffeffff0efeb000}, {r2, 0x0, 0x2018000, 0x8001000101003800}, {r3, 0x0, 0xff7ff000, 0x44f3ecb5ad93d5c4}]}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:45 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x500000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:45 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x300) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:45 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x400000) 03:42:46 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = msgget(0x2, 0x4) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_RMID(r2, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = msgget(0x2, 0x4) msgctl$IPC_RMID(r3, 0x0) msgctl$IPC_RMID(r3, 0x0) 03:42:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) wait4(r1, &(0x7f00000001c0), 0x40000000, &(0x7f0000000340)) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$P9_RRENAMEAT(r3, &(0x7f0000000240)={0x7, 0x4b, 0x1}, 0x7) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x145000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xffffff3c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x8001, 0x141002) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000080)) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:46 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x600000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:46 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$int_in(r2, 0x40000000af72, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r4}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x1000, 0x5}, 0xc) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:46 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:46 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x700000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={')wz', 0x1}, &(0x7f00000001c0)="37f1d7bb9a72dab4a45c01d5611a746c1d5519f42c1993f5f0e8d6a1fb18d8a2d5e28de9b0d115cc357ba837f1f189b4105f5ac78913356f24c68f133562b1a7acf5c033d34eb695c7759d7886155e65c8f0ed0667f2225ef2ea71df24aa5c008025e2bad5bcace19f0da21356a23a468ad6d06c30f148c1cb930e2f5273ee239c0682f7679ecf3d508b3027baf225a06f32fb7b3168216f8e4b7ac4771bef59d4b69874158835689dccc2d451c505a778dda69c42dc694b322fa587a98152acf95940f2d1bd818395515f303d74d80e", 0x390, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r1) keyctl$set_timeout(0xf, r1, 0x1) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) ioprio_set$pid(0x2, r2, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:46 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x800000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 512.112358][ T26] audit: type=1804 audit(1567741367.224:175): pid=29738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/387/file0/file0" dev="loop2" ino=1007 res=1 03:42:47 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x480) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 512.224906][ T26] audit: type=1804 audit(1567741367.254:176): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/387/file0/file0" dev="loop2" ino=1007 res=1 03:42:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400040, 0x0) 03:42:47 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x50d, 0x90040, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x0, 0xa00d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r1) 03:42:47 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x926000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 512.378013][ T26] audit: type=1804 audit(1567741367.484:177): pid=29716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/443/file0/file0" dev="loop4" ino=1008 res=1 [ 512.472049][ T26] audit: type=1804 audit(1567741367.484:178): pid=29757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/443/file0/file0" dev="loop4" ino=1008 res=1 03:42:47 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000340)="5d58e818026f1c4c0408699cf7df6589b891f4ffe3aa17e12666cc98d7fd972890c8694a92affda9b000e03aec901b47d88ef6b90c0cb655d4e0a39afbc81c3f764367a7ddbe6aa707d33ed880f51bbe5ee05c211437291d637c8f5eda336087eab267c500c07152fa6b95fd35c6257c63dab2b841b99a85bc1e05263472db51a26c5117d7af1f503d2dc137b4c4869e3682cf572f1e8363715e420cee66cfd736bff886edb5c6e9c510fd7813de17e8ebe4f7c0c50f8fcb50f8b7b9f4e0a028a9e708993cd41f6f5899b7080d631e2ed4c902", 0xd3, 0xfffffffffffffffa) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="7573657254cd255e00"]) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:47 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x5, 0x0, 0x80000000, 0x5, 0x0, 0x8, 0x0, 0x4, 0x80000001, 0x80000001, 0x1, 0xffffffffbd13e36c, 0x2, 0x9, 0x8cb, 0x4, 0x1, 0x1, 0x3ff, 0xc80, 0x193, 0x54, 0x0, 0x69, 0x800, 0x6, 0xb00, 0x7, 0x8, 0x0, 0x1, 0x7, 0x1000, 0x1f, 0x10001, 0x7fff, 0x0, 0x4000000000, 0x2, @perf_bp={&(0x7f00000001c0), 0x7}, 0x80, 0x60c3, 0x1ff, 0x5, 0x1, 0x0, 0xff}, r2, 0xa, 0xffffffffffffffff, 0x19) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)={0x5, 0x9, 0x20, 0x800}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)="7aad424cc36eacdeea9a1338cf6703d46f271c7d1c10abb75b1cea6cba3458d39c8f5c491e"}, 0x10) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) set_mempolicy(0x8000, &(0x7f00000001c0)=0x5, 0x2) 03:42:47 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xc00000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:47 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = syz_open_dev$admmidi(&(0x7f0000001740)='/dev/admmidi#\x00', 0x0, 0xc800) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000340)={r4, 0x18f88014b3da7691}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000340)={r4, 0x2}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000280)={r4, 0x5, &(0x7f0000000080)=[0x0, 0x4, 0x6b7, 0x4, 0x80], &(0x7f00000001c0)=[0xd1, 0x80000001, 0x3, 0x1, 0x20, 0xffffffffffff7fff, 0x8, 0x3, 0x4, 0xfffffffffffffff7], 0x11, 0x6, 0x45, &(0x7f0000000200)=[0x5, 0x2, 0x4, 0x3, 0x7f, 0x7], &(0x7f0000000240)=[0x3ff, 0xb9, 0x6, 0x2]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r5 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r5}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x28, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r6, 0x6, 0x10}, 0xc) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 512.727400][ T26] audit: type=1804 audit(1567741367.834:179): pid=29812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/388/file0/file0" dev="sda1" ino=17169 res=1 03:42:48 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x500) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:48 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1000000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000080)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:48 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000001c0)=r2) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video1\x00', 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) r5 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', r6}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x7, 0x4e22, 0xdf3, 0x2, 0x90, 0x80, 0x88, r6, r8}, {0x7, 0xffff, 0x7, 0x80000001, 0xffffffffffffff27, 0x1000, 0x0, 0x6f9eed0c}, {0x7, 0xfffffffffffffffe, 0x7, 0x1ff}, 0x7, 0x6e6bb1, 0x1, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x4d2, 0x2b}, 0xe, @in6=@dev={0xfe, 0x80, [], 0xf}, 0x3500, 0x0, 0x3, 0xffffffffffffffff, 0x2, 0x1000, 0x3}}, 0xe8) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$KDGKBSENT(r9, 0x4b48, &(0x7f0000000080)={0x4, 0x1, 0x7}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$RTC_WIE_ON(r10, 0x700f) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000200)=""/77, 0xfffffcd1}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) fcntl$setsig(r0, 0xa, 0x1) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$VIDIOC_G_TUNER(r11, 0xc054561d, &(0x7f0000000180)={0x8, "cdde128b4ad17d94cacb9dbe4a086f7606413503fe7abe9b736a5270e9c4b206", 0x3, 0x8, 0x2, 0x1, 0xc552827dca4958e8, 0x2, 0xffffffff, 0x7}) 03:42:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000080)=""/26, 0x1a}], 0x6, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:48 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x600) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:48 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000002c0)=""/241, &(0x7f0000000280)=0xb9f200cdd34e168f) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000240)={0xfc2, 0x1, 0x7fffffff, 0x104, 0x0, 0x2d519404, 0x4}) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r4}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x14300, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000002c0)) fcntl$setown(0xffffffffffffffff, 0x8, r6) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000000200)={0x8, 0x1002, 0x6, 0x7fffffff, 0x2, 0x80}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:48 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1200000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) lstat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f0000001180)=[{&(0x7f0000000180)="9869703d983313f9c83b174ef2660c4ef0300657c6ac19d1ffc9fead6b29abeb2473efc332217f9a6b2faac5d3c931a52226d5fc7f3cd36798455cbf8ae8053935b0b0197fb85f73378534635e235801f82a3b0515d82adc9c7c472b75cab3381a560c44c57839685bfb45cc17463499d09d8b8bba5e1108e2fa60adf3bd62beb7a60523ab2cf1774997bad31f2aebf4cd91d52c1d638a782bfaa796fdbbc7ff4c2e1d45e6e70fb7873c5a9b9d4e9888039df74a63b4c2355c6f2bf3313a3256439d4f5941b8ed0a5d69be2db598d57828205ae440598793d87e2803c5d7d8c1bff1c0d0487abe680217781795050b9c6db1f93c6b49849c35bcdaaf0b874d2728dd82ccf998dc6ce32a0f172eb927428f9767605b3dd15ef8b01c9662c608a10e9d78e1a3ff64137198be98c54ac41b7ec579bc4b0c0ccf718fee90efa07c4ac6ea44290ff567846c785276415c6db865b2dae4677025ec844a9433acb04c9610c33bbbb47c6e1c5fb729016cc014b4e7c1c6a31ea467825d03a1dfcacb8942dee921696c9f364a0466e0b7fd7c7bc5ed30ce6111f428957db319e7639e88faecc056f066d01c6debc0ef2bfe52d82e649a4bdf243fad26af519ecf9b04df0aa7ea6ff6840d5527e30a6dc3007f30b2f38cb2361a12287c9fea767fe3a865e039869c50384ac7cf69265e89074615954b79c8102e718cf00f731f256d5e31dfaddf126a616af9b4ced5c458cf95b388e850741dc2d55fbe4c6a25177ae25ba04c615bfe0ae54f33a4ba0a7d54a6293e2b1a6d5ef08c6c31c7b4f8b5e09adc675cf047333b811655ea7a670de00c33d1d61fcf116e62a610b0f0afd3de700f0521d6ef72177a69ee279c99869ab8fe3dc7171a0167cd4d6de65e65942a17ac3927d685f8c49e3ed3b207c874a9fb70ac69b3e5a1a64007ce9061266b9f02b5b0769d4a4e1970685f1bb116770abba0812428c66bc991adb9e933eb65f5b28af38470df10585ea80922f41db616cf9db0a733762a549516382144b76081633de758f9b05e620c89711459be96a9cf9c33710eb2bab4c2c2f3c911bd5b45ce4561c369bfaef83d28142d690fbc7305e7347ca42a761f239f5523f9c9f69301ebf72537aab5d6afe0bd280b98dab04f5a83c1a6459b58917828b1ccbecf552c68e830ebeab5d8aff46e483fcc8ebbeb374a19552cb37dc01d4b11c42a73952d335bae59ebc9aa4bce8a3abf08dd8c05b29f9d89364ab0e9d8629e4432fb4da25a0cda40f8bd01cbe1be06a5f62adeef332affa093d005d06eb062a098b71525453696adddf5970dc57446e3d768c70cba1b625082b2be3f5cecaaafe5c2275752b04460e37ae837ad0c71123458260a6672b44b14fdb4c0e1050cc3d4e7819f127b99c99ce3ca8be01a9f01fbb4ddfc292b18265ac1538aa106242d41223432ca89f4c8ff198ad130aeb3b93cbcae1dfdaafc0f49e3eea664d865cb38aac053108e1fec9bae84754b835f91bdca75c3b3df83d86dc4c7fe2c7fa89f8a7c83153094095df77de62060e24f1056c5166ac1b462f9fc1926659f04e268643aececcbe42a2bc08e1d7674ec21d51df90949b51bac2277ad9e0a091bf460d782c0e7a6fe00f987402f001c7d1da8c287a276e18526479ee94a6dfda873ff5ad7c5bb578f1a46d4ce511c26582bcaae79c449f61c5566bf4b573d1d7564f5b6b6d8d612dcf251c39a2c282d848843367f7b259419c75f624a4735a4946bd6a75f70d2448d483a43d89cf394930dd5387de2f14c7b2e7f6a4224d159717cc56c9ab693ad9fc863757431bbeabcb83ba54cded4b3eeb1ba33c8ab378a1ae29f1f326e3810821bdc1fa24296b086cc83814e795d03b8c29516f0449aad6cc717f23e2db2ab0cd93337d0d0507040d86635344b2049a1a2bc17ab40a9132af40d6c9b945ccc851e21a7f5574f7acd6df124d73fd420488854a1dfb2bccc98e5ebccb0fbf540db5356d84d5d7ec732268d3b87d21a6a67a54694e0d2a828ce4adb7717b30b5f127111fc76983fdc46e7408d16c3fc0570e547fa518e6f67371c553e44a7f7a5a576412f699725c758346dd342bb8b75af65289c7483058bcbc8bb3f8322d5326f5ac01d631629f4ab396201864ea3fc432edc0b49a90aa3f734a68d4da32828e3290b750150e9459f54542d34a671ae0ff04b1533b38ea8946c9dfdcda33085f74f94341b005844fb2d16f7453dd5abc5cd2fdad462239cbc49a16a03ee8bd89d815f79e07b25b44d6dc3cbcf3b56ddc43333f48a5a7157956e1a89696616aa3d69a2d5a27d7158c6e430c91ab99206c9946705959bbb28e098a69be52a50623f3523032554fd402b29a3b54173afd4c4b4c11a9f4c89fd6fd1b009be9c02ae74c49cc47b00338b78dfa0a08d8275c0c10b6d2a23dc3843beae4b7a7a038ee0309ca5d617c8035b890d3a4f488e5c1351c8edefce73a140bcb80bef932a618976a9ec69cc749f83a8738b42e1fa045a58b6f8aa67d013d168aa9439c642a533178a02aa5c65cf62cec2e31f51979a457e49e857cc3e6d5eaa950a0a060bb94da161b4e5425ce11230d7a21c79f3384a4d56b1df7c51a4ecb0d2d57568178163f300110876c7f6b7a991811f4df43b07071ceca19db2d4963112da5d8262e8f6a627a8a82645442e0fd01466673e19045bf79d6b80da078b3a6603633853c91421a5b40a472c4b41f4631af515422d0825d54b1347c0026907421be2e2f41fbbaef7eb91ebefbccad6d606e555dfe6a45130dc480424135d7f854b3c35e94efbdee2b36381735605b0afd323b94e23d769843e8589d4949b4174d9ea4a3dce3866a7a03b4c4d3bd36749f393c2ae95c82fbc3ecd3b759d6ecd83eba2f6ed5916cb6ab36f42a7ac59b8a837aafcc24816195e845339cccd067f240028c6483c3fbbbf7952eff206c69318694dc6918069b2c9fe286848e8acdbec17263f4e25a7a40d7314f5a5464f2612d35bc40c14c591cf0b5ab1806beeeb4f1ecfc2761c1e301391edf286f874eb85400e04f311f8e7f13ddc5cb4eed99aaccde10a97c31054f02cb96bd91f03b9505e48a00efe8fe1517f886c6ac8088b96ce1de4a01bcb8a844f2c8f6d744fd7ca0eea1e39d1e3eee2ec75eb5d475138f0606f4b6b89230ef4067fc5767dda42b04f66f5c7f0189046e748ff3d9b369e574ab84e0ab1630c8d8864d98614bfc4e4291a5efa1292ec27c24087d64aaba41753b230c45d098dcb80b9cd6f00154d6e2479246cad1a213994d74b7bea6b080422b2ad8ba278b2bf359c1b3c285614b97449b6235b8d08a8af48c59033c27e9f08fd78271bf7129f33ca9d08cb9020672ff92043a97e5d9cb8dbe50977aefaba4c999d69402b50937a68c081e23ab0cf6f6f675cbb9a67186b5e2c5fe5a20af68f4719bd40b25a9bd680383dc71eb13dc946d542e2106705d0a90b10c6cfd68ec6c6602271f28ff359f5506322729a0db51c121fa823e77626ecde6304a661b228904d062f780b978a13bb308b56214c57c7ae6470e51aab5f8759cd01b740451387babfdc12bd44502f754b7f909ab84c5ffb7c12d63958a1d024dcf01c02dfc70c0e7db6c08ad8b9ad2f44a02182aafca8921668af3a6a1385dee0cd809b99ab5a6273678cfcd49c164aa2819b1adc28dc00d1630cfdf144be70afd769cbeda4be87845bc135a9e3fb9501639a0b7232caab0df04ab3506c6f3f3a7699140c0926e67a5975e8110bfa82926330573164495ce680598ad4e7b4348d88625eb1f735b8a39c765ae16b5a50332578ba734455d99a26f37c58c43fc921eaa30bc8630895fbea861edb1ac54e5160ece2a9e98ad274e703c29a4d0b75bc510dc2b9dd78922f3dd83779641873d6d7ef2ba2c02c835fff17694873e7c7a9092603ef2e625f7175c4d54765cb6178d1bb079e8eb395b94ebd633ccdbd9a3d530b2668d6300017479d5a8885303d992bc8e611cae545e061a4a3774ea40a7796d812e21a48141b3976a341ead9fb5bbb0f30eaffa022538bf7d2e41d9c54e6d81ff2659576e6b135709985551e45846f9c4ef50802b9991748e9f7e96bd2e0ac07b25f25628e09177e16330a3ade4050c30839852e9294947baf7de857766cfd6c347ae312d4ff5e3318bf7003f15ce49c1cd2faad591331a51f092930ea84f5a418c370bc7df5913993af22614794b10b0a3bc1844b3e794823d6b6ffcfc5005aa72e4387f4129f37963c020e8d58f601dc312844d44dc9a5f1a2d891785879e1e6bbe9daeac41159b240c9ac248fc8ba63cc3603a44182ddc9a5f070db2848a749ce65eed507abdeb0bd321e20bcafed18dc84e850a93b2f1381756493413f8d7a0ea118ec75596c3c2d8a09d496cdb8256aa9c8ac8400542202c843a6fd13fc544371b960fe65493c221492e7d37673d83fc590f2f9886ec83a557afa36a1727c150117806f5aa221a2a419af72012eb1ae07b778f7b852e92ab9e91babc0eb5cb393e8a2fa2091504c9432f9f70818485c56e4e3370b5b245d7ee1b3c8c6af89c0918132b5d5664e0205be324d1e01174a8d1cca6e3f4589001e629bbe2ec6171361a8fea5b462592fd1399232f6578c0b77a06e756c2a0c7ef1379b15bb55b3d467e1e871c424875cfd29c49ed134552a11c37411b88eb1778092cd0f32d483c7d5ccfe8fc8a1b8e46b3fc23c142a5033593762bd0a6d79fec8a7da72ca72a6f55416178d8172a87899e83a6b316b2f3b3b2577eb8cc3b5af1452b3debcd0a753cc093a2249d69b87ce29bc78b81a9ae2f70772afbcc9850adfaed03adf9ddbae6fc6a83996e3f74e6a921326fe878347fb47f7e114fd1a6f47af90454b1411cbf61cd3b16d5b93d303b445d6baf0d55c54b53b2df1f2756ee8e919d217fa7eddd23d9619a8a4e17a7bc366226514a492c24a1b4afdbe5d376dd89ede55d0603cad1b25e2ed5679943afda3eb8236ff9c42f33c932063e0418648a68f9e2ad1701e4c9fcca884e97d81e29480b2d727ad82c0f41916e32eb08de8adb943e9f7c5e78fb8064a4b3dd4d8c8277f1b3c0f444c210b78d7eb786fe33b05c297bc5894ba4d4a02f5a1aa7c0c5500d074a7a3cf3a2964e133731581091141b44d1726191526e989453f037e5c39e27c99209dde56714abd00137c8bf8aa52041f01e900d1cd0f1e8d6d86b828006a8028f77a5f97bf6fe368aa646db2fed453b37996255fe7bd514d502ba5791c455dfd707eba94a3a0d406905e5b17aab158d20e344616b4b3a1762e158901cfbd9045f03a436dc5371e8870df36f476f90795e12aa6a943ba75ed1f6102511d4ba00d067f68f42512dd34d680327d55a863d6dfea9284e4ed5d2470af75748040aea8e78728550284ab28cce1685e35ab5a303b97b92eb576ca8065e5346ebf36cbbb5a3484e1b2fef84bd34c5c3773865545325070ed4bc6bfda301a4aa9756efb1a24c8d03429c2b62c011f9cb3a86bbb25277b0bb0229a2806bad013aaceb012e9a24238dd8a37a217f7b684102a4914501ce773aa5400135eb9f7e8cabbe6662e70344238338a198c076c4f5f037234f2cfedce76ae4df1561123fe55ed6a05bee3b4d24ad6d34a14030040f82dfa022ea5c34ac4cec6eaaaa1172c85d32269736df12b4e8963706afc39f538d10a9c2e219fa90a16fece027fbf4ac8079cf88f182926eda124ce73078ea8b1e16296b41ed27684c7d78039c8aa84e6c22c6354ab3b3e48c012df509adf975e8d5357a926c45a66eb1b2c500946", 0x1000}, {&(0x7f00000014c0)="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", 0x1000, 0x3}], 0x240081, &(0x7f0000001280)={[{@fat=@check_normal='check=normal'}, {@nodots='nodots'}, {@fat=@uid={'uid', 0x3d, r1}}, {@fat=@tz_utc='tz=UTC'}, {@dots='dots'}, {@dots='dots'}], [{@obj_role={'obj_role', 0x3d, 'cgroup'}}, {@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}]}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:49 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1400000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x0, 0x6, 0x7f, 0x7}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:49 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000ffffac0008000700800021c2"], &(0x7f0000000180)=0x12) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e21, @remote}}) 03:42:49 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1b00000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 514.314223][ T26] audit: type=1804 audit(1567741369.424:180): pid=29947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/481/file0/file0" dev="loop0" ino=1016 res=1 [ 514.350060][T29875] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 514.435645][ T26] audit: type=1804 audit(1567741369.474:181): pid=29953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/481/file0/file0" dev="loop0" ino=1016 res=1 [ 514.489167][T29875] FAT-fs (loop4): Filesystem has been set read-only [ 514.512528][T29949] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 514.524339][ T26] audit: type=1804 audit(1567741369.624:182): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/445/file0/file0" dev="loop4" ino=1017 res=1 03:42:49 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000240)) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:49 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) r3 = semget$private(0x0, 0xa90469024dd463ca, 0x110) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000240)=""/184) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000300)=0xf1) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000080)={0x10}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000180)={0xfffffffffffff001, 0x0, [], {0x0, @bt={0xfefc00, 0xbc9, 0x0, 0x7, 0x3, 0xdd5, 0x10001, 0x800000000f27a, 0x6, 0x80000001, 0x4, 0x20, 0x0, 0x81, 0x8, 0xe8f68a1470345fc6}}}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) 03:42:49 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000001c0), 0x4) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) uname(&(0x7f0000000240)=""/27) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:49 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x700) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:49 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x3f00000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:49 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="37f1d7bb9a72dab4a45c01d5611a746c1d5519f42c1993f5f0e8d6a1fb18d8a2d5e28de9b0d115cc357ba837f1f189b4105f5ac78913356f24c68f133562b1a7acf5c033d34eb695c7759d7886155e65c8f0ed0667f2225ef2ea71df24aa5c008025e2bad5bcace19f0da21356a23a468ad6d06c30f148c1cb930e2f5273ee239c0682f7679ecf3d508b3027baf225a06f32fb7b3168216f8e4b7ac4771bef59d4b69874158835689dccc2d451c505a778dda69c42dc694b322fa587a981", 0xbe, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r2) keyctl$update(0x2, r2, &(0x7f00000002c0)="f7ecb10c1324f15b72e49d876d8b8448e75dc9622ce1552d4518036fcdc26a2f83997fb93032fb7d32eeba755fa99e57f4f581fd5d18f3fc301b4af15efb9e43ab9641dbf3ee5ba9ca639be925ccf09561a313c0158d56b39a0f5cee00c8a7a93b9fb41764f2721ca70a398700058930fe8cfe32d899ade0377c73b5371948f76d3623b663d5eed921cf", 0x8a) r3 = dup(r1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x1e0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x7d, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000004c0)={r9, @in6={{0xa, 0x4e23, 0x10001, @mcast1, 0x7}}, 0x1}, &(0x7f0000000580)=0x90) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)=@known='system.advise\x00') fcntl$setown(r10, 0x8, r11) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r5, 0x20, 0x0, @ib={0x1b, 0xc1c, 0x6, {"501da91e626c17df22e975b60e9abacd"}, 0x3, 0x0, 0x6}}}, 0x90) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$void(r3, 0x5451) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xe71, 0x115000) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000080)) 03:42:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x47, 0x2}, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='wlan0\x00', 0x0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:50 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4000000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:50 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xc01) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x28000, 0x0) write$input_event(r1, &(0x7f0000000080)={{}, 0x12, 0xffffffff, 0xb85}, 0x18) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000180)={"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"}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r4}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 515.451405][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 515.451420][ T26] audit: type=1804 audit(1567741370.564:186): pid=29990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/482/file0/file0" dev="loop0" ino=1024 res=1 [ 515.538521][T29982] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 515.584115][T29982] FAT-fs (loop0): Filesystem has been set read-only [ 515.663613][ T26] audit: type=1804 audit(1567741370.754:187): pid=30008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/446/file0/file0" dev="loop4" ino=1026 res=1 03:42:51 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x3300) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:51 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x8004000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:51 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x9, 0x800) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000480)=0x3, 0x4) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000001c0)=0x3) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000240)=0x1, 0x4) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) prctl$PR_SET_FPEXC(0xc, 0x10000) r2 = dup(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x120c0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000001c0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:51 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x7) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 515.981706][T10330] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 516.005210][T10330] FAT-fs (loop4): Filesystem has been set read-only 03:42:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:51 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xe201000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:51 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x100000da, 0x10000) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x1, &(0x7f0000000180)=0x2) 03:42:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2f4, r3, 0x1f9b88904a3d344f, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x184, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @empty, 0x1ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x101}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf24}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7a, @ipv4={[], [], @rand_addr=0x7}, 0x8000}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffb9b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe560}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x76ce}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xfffffe9d, 0x2, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x322}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8000040}, 0x40) 03:42:51 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xf6ffffff00000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:51 executing program 1: nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 516.797025][ T26] audit: type=1804 audit(1567741371.904:188): pid=30099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/393/file0/file0" dev="loop2" ino=1029 res=1 [ 517.148251][ T26] audit: type=1804 audit(1567741372.254:189): pid=30172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/447/file0/file0" dev="loop4" ino=1031 res=1 [ 517.195794][ T26] audit: type=1804 audit(1567741372.294:190): pid=30175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/447/file0/file0" dev="loop4" ino=1031 res=1 03:42:52 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:52 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:52 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfeffffff00000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:52 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x3, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000100)=0x18000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r4}) preadv(r0, &(0x7f0000001480), 0x0, 0x0) write$tun(r3, &(0x7f0000000040)={@void, @void, @x25={0x1, 0x6, 0xfd, "2298aed7ad2ce9c1febf7a26814ea4b4291ad54814fbc41dcc3deb550a0c32ab35f022e6c39de51c796c964fba4b4405752ba0abc2e5652b1eeb785c0ee72d0d992e5dd5b79d8a3cbd8fe4655cc81436a955afff1dabfdc7029b1dc7a9f3c95f4b"}}, 0x64) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x100000) ioctl$KDDELIO(r1, 0x4b35, 0x80000001) 03:42:52 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=""/236, 0xec) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000440)={0xa20000, 0x3, 0x4, [], &(0x7f0000000280)={0x98092a, 0xff, [], @value64=0x1}}) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7c48b6265c70ca34, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3) [ 517.311309][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 517.321422][T11958] FAT-fs (loop2): Filesystem has been set read-only [ 517.344296][T30184] Unknown ioctl 30473 03:42:52 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001680)='/dev/ubi_ctrl\x00', 0x20000, 0x0) pipe2(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdirat$cgroup(r0, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r3, &(0x7f0000001640)={&(0x7f0000000340)=@llc={0x1a, 0x308, 0x0, 0x2, 0x4f4, 0x1, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f00000003c0)="cbf16a9a2fabe9cd654da4f4ad9010960a56e7b1374ca0d810e2a26693a3ad94fad8fe94658931e76f4f4bf7855e887ace68e398ac21d3352406d822564c1fbaf991251b", 0x44}, {&(0x7f0000000540)="1079eb903b44ff128889f659688312905b80039d58612868b80ceb0cc768b478f31cdc651600d57e5f326fce4c2e", 0x2e}, {&(0x7f0000000580)="c9b7e706f45dec0ed69d650e9cba9545cff9c9b8166bea0cc03e991625a5122896a761e5781c636ddbac916ac3da9a27cd1237b3ab5c86830c6c6ff5a096d863aceeac24392bf4b1b3df2ce98d79ade15f23c184c1cf6525a05628503a529bd29a2ea3b2ddab294ca2a2db11605439599db1e9dbd34168", 0x77}, {&(0x7f0000000600)="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", 0x1000}], 0x4}, 0x4040080) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) recvfrom$inet(r4, &(0x7f0000000240)=""/117, 0x75, 0x1, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) mount(&(0x7f0000001700)=@sg0='/dev/sg0\x00', &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='omfs\x00', 0x4, &(0x7f00000017c0)='vfat\x00') openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 517.361251][T30184] Unknown ioctl 1074310912 [ 517.413810][T30196] Unknown ioctl 30473 [ 517.423499][T30199] Unknown ioctl 1074310912 03:42:52 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x7) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:52 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xff00000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:52 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/180, 0xb4}], 0x3, 0x1) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:52 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:53 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 518.437232][ T26] audit: type=1804 audit(1567741373.544:191): pid=30269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/394/file0/file0" dev="loop2" ino=1034 res=1 03:42:53 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x8004) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:53 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xffffffff00000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:53 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) dup(r2) r3 = socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000002980)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000200)={0x0, 0x2a00000000, 0x1, [], &(0x7f0000000180)=0x8}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) name_to_handle_at(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0xee, 0x7, "21247ae39be4e30204f6eb744103c29f2ccbe0f42c9658bea943183ce500e694d712fe85ab075a37805fd307ed939015933bfdc9aa619da198cb889a1c885441d4887a644883e689b120db87666a17d3cd34830702a1c6eb7331f83f91a7ada8fdadad9c1046027ca76e3c7d745f9f2a4e2e31c67b6d29103efafb76fe80d2ea2af8ca1516fc539d75a6af0b291a1fc13ea0c4b641a6ebd68fb080dfad06b4f56f1462f31eedc22f7751ab6784701c8026eec747b2144303072b8312514903a3736396f5ca05f6312efd8e1b0edef2838e1e2a3d92705201f7ee369e41e3cfb8c75382187a56"}, &(0x7f0000000380), 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x27}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 518.619167][ T26] audit: type=1804 audit(1567741373.734:192): pid=30267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/486/file0/file0" dev="loop0" ino=1035 res=1 03:42:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 518.674902][ T26] audit: type=1804 audit(1567741373.734:193): pid=30271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/486/file0/file0" dev="loop0" ino=1035 res=1 03:42:53 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfffffffffffff000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 518.830478][ T26] audit: type=1804 audit(1567741373.944:194): pid=30261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/449/file0/file0" dev="loop4" ino=1040 res=1 03:42:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 518.893031][T30291] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 518.904010][T30291] FAT-fs (loop4): Filesystem has been set read-only [ 518.957082][T10320] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 518.966113][T10320] FAT-fs (loop1): Filesystem has been set read-only 03:42:54 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xff00) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:54 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)={0x2, 0x80000001, 0x6, 0x0, 0x0, [{r3, 0x0, 0x10000}, {r6}, {r7, 0x0, 0x6}, {r8, 0x0, 0x7fffffff}, {0xffffffffffffffff, 0x0, 0x8000}, {r0, 0x0, 0xfffffffffffffffe}]}) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:54 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) move_mount(r0, &(0x7f0000000780)='./file1\x00', r3, &(0x7f00000007c0)='./file1\x00', 0x40) syz_mount_image$f2fs(&(0x7f0000000980)='f2fs\x00', &(0x7f00000009c0)='./file0\x00', 0x7b, 0x6, &(0x7f0000000d40)=[{&(0x7f0000000a00)="b8f53e6eb6d6591227e654da2838f8a5bdbc5ef83ccd5dceeb1f8241e75d19c187ee6e1fbd032d132ed009710b3a4193a9b58b237d60fed657253d15268d3d194fc333cdca0cf23ab5783510e4e26c11c75c2e35f1372a85ce4fd6f4037573bb", 0x60, 0x1}, {&(0x7f0000000a80)="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", 0xfd, 0x2}, {&(0x7f0000000ec0)="d6b8be669e0d13b269f6e528ab45ee6e408746bfc557ddfafaa6535f96dfb56b7ab7f251215319f02fbf882c1cb9005473cf45cfdb6b3626a4269c46c90927113fb21d39a969fdd80247d9006fd235c1c9f010e2c13951fd01d02060e9dc", 0x5e}, {&(0x7f0000000c00)="daaa784220e5bde2dbc9508ad11e39c85a48220b9c7616de804f165cc53e3a68832276d1415b7c536b9871224a6260bc048487293cdc70017fd85ca7f3aa22265cdf9de6974487811eb49b261cf7bfe1941f831ddd4a6f6aebb602590da8a8a40175b63605a5bdc2b20b4fa8efe5460523dbc0d7ffbe72ac70387168", 0x7c, 0x2000000040}, {&(0x7f0000000c80), 0x0, 0x2}, {&(0x7f0000000cc0)="dea8299659e2fd2046bb503c323c8de06dfbceefba84378d10498f8d0987a1a2a1172905cf7fca5fe90a7fbb8ca27a54b0a93133d280ee8c7c32706c24f8577c4e60797ac8da697be300785ba42ab7bc1dcb9108f40ca1e587e7bb80c1808553a1460b8693ad0d26375c0377", 0x6c, 0x3}], 0x80500, &(0x7f0000000e00)={[{@nodiscard='nodiscard'}, {@noquota='noquota'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@adaptive_mode='mode=adaptive'}], [{@permit_directio='permit_directio'}, {@pcr={'pcr', 0x3d, 0x24}}, {@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@measure='measure'}, {@uid_gt={'uid>'}}]}) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000740)='./file1\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000580)=0xffffffffffffff7f) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'\x00', r5}) syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000200)='./file1\x00', 0xfff, 0x3, &(0x7f0000000400)=[{&(0x7f0000000240)="27d02489597c379576b5cc9663a27046b38993f9c989a50234be3fcfea85b8cb410e1615c5b74b6728871041ae17140760e31250fae63faac00660322489c0deee086470442c", 0x46, 0x2}, {&(0x7f0000000340)="879ffc52397654cf18ba1387f6e06b4079355d8ddf29046bffbbc8372b6e45bf06d842fa5dffbbdfbab4b6b16f20b171d1d0f297e266f93b402c43e923e898907d6103cfe403307b6e848236d40791805cb9f447a6aaa3dee2ea8d98cdd36b54bd7211b9bd7d07c9df98f20b", 0x6c, 0x800}, {&(0x7f00000003c0)="06db7453b1af7e4c0239fa8d6c39d829ad27a646add3e59679d1a3f811c15cd791689439485a6c3e855f0d25151d", 0x2e, 0x101}], 0x20000, &(0x7f0000000640)={[{@norock='norock'}, {@nojoliet='nojoliet'}, {@nojoliet='nojoliet'}, {@nocompress='nocompress'}, {@norock='norock'}, {@overriderock='overriderockperm'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\+'}}, {@euid_lt={'euid<', r6}}, {@hash='hash'}]}) ioctl$VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000006c0)) creat(&(0x7f0000000100)='./file1\x00', 0x0) r7 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={0x1, &(0x7f0000000800)="bf1b91549078fee2ac4367139e4a311caa7b2e41efe64b6862e381e8a4b6df0ec16370d3904cc02e993acfedd505722b7988aaa97d0f282329efb7c6eacf8a423906e38452f0bb2334a99acefd38594aa37570db9dd5fd4d8ff579053b0bf6bb3b34e692081016defc5cdb32da55c110855c2e2a80042ab68694aaa108c0ee0d15fac3d5148fda330bb973019590ddab24d310", &(0x7f00000008c0)=""/91}, 0x18) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:54 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x480601, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000001c0)=0x8) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:54 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x1, 0x2, 0x9, 0x8, 0x1, 0x1, 0x80, 0x9, 0x200, 0xff, 0xa, 0x6, 0x0, 0xff, 0x6, 0xfff], 0x6000, 0x100}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) preadv(r0, &(0x7f0000001480), 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:55 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xa1f7, @mcast1, 0x5}}, 0x3ff, 0x376, 0x3, 0x8001, 0x400}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e22, 0x8, @remote, 0x1}}}, &(0x7f0000000380)=0x84) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x80400, 0x0) recvfrom$ax25(r4, &(0x7f0000000400)=""/17, 0x11, 0x206, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 03:42:55 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0xaaaaaaaaaaaa93b, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x2bd}], 0x12014, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, &(0x7f00000001c0)="e9e4b64c181c5f4741fb57386eb41b4e9f15ce2672b7d155421573c3873b6a8de254c23a9c738631aacaad8fa195e73b5285e2b8dc7279ec69545cfa8a77396d94cc961fbd00beffe1a925254afdff8540177f69f471fe686565c0fd59a4f9fec4b956c0596a0fbd61e7a2fa1b0134382615675538048eb14adce1a129fd46230ddfa633edd4afe35d58f469ffbf572a63dc8af9542874e19ee341cb4258e1733527c364c4b5fad83064cc12c9229de7b7ec49e3771c5078d0c7f0c80c9f24156dfd5d6ed86b2294f27b9d2f1d5ddca1c0", 0xd1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ftruncate(r3, 0xffffffffffffffb1) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x220200, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000001740)=0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) r10 = getegid() sendmsg$unix(r4, &(0x7f00000017c0)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000640)="a87cc40844347a246a3adca2b8d4769eadab6730fe971fae1770133b8e95c6cf7f718f75be9ba46597251f6b825a686c09e9e2bb19f25ce124b21fea17537f2f0c4c03d2370ec0ca5f4826ed8d791c17b636dde2e43f380a5373fd8515b832396e759310974fe4cfe8c108df897bfc13eb6667cfd5d1decf71c4946d4c2724ee202b66f184c700436fa2bc0df228ff7bb362962c371fddb35cd5ea8385e2bebb76343202951c0d7b5dfe3163a9279c2ca248a22b5c371cd3918a7cc21d1eb3925fb8104ea0fa0f9e794f556863a0867e6124974080ee32db8052f8dffbb04a5fcb5322a5e1a43a6648a859c51a59fab13ee3bb128a3824bb2d209425a7fb0546e1b969c031e7fb25ab5019a65559944c19e1186c0b48a43538284bfaabf38ea3177775c4705a1b9bc61674c37bc0e2f59d7ca326c95c4cc8b1f0932968d95ed93ede8c187f685d38510fbaad28bafd4c95433e3893e196685971ddfe3d42f035b9b33d646a01f45cec515e9c0bb4ec8985a329e65f2a4307e0ad275407e773942ce2e02b6d62011f183937c9d8d1802d10579bdbb1073e241f02526340e865b50f582764bb9dcd910c9f551f8aa476c58d7edc1de8f441473831551c4a51bf79936055e4cd992e8d98d8e08e5c8f4801501ed54915d11f1706a61fe2037752392cce933748e1ed1ec200d67d83dc7fbb50821f66cdbe38ba6c420bbd4da47b42cd07ad52aea3d9896bacb6d3b6eeb9583338586b892015062428c260bc49b5492e506fbb4f83183ba05f831b89f6324bb9e4caebf1080ac2939d0499ee07f6c9d95d0d631f30b2a38213da54a380444ab70a549038e418810892007b36a3d1a5c85a4b826c0d0501a2351395d3b3e09ee021e43bfb8aaf0ccc008ded32d2846bfa1519e882038fda2c0019aaae6f547c7d0e9df91dc94425d237244e1d57008d79132ad2e971d29e6c45f0e0dc5d001beced3b0ba4f4a7200409256bd8bcdee43a218e746dcdc42a084010de984664aae0fb302bb5ac699f522c462db5807d682cb7105a1016148fbac2b3120b03f2059cc3facb56259449f3ac835b5f4297f6f08284b482da3996b89da5b4e4ead01d8b6f320a89ca776a13e86ed3f1698118104486f86698bf8f567a91260143c8176ec591f0aa815e988e993f7fccd355fe9fdb8aac8f2b6f536bec631ff2e8b935ad956f989c44ebdfc416388150a9c7250421cb86783309c3d1223855d5cbf0eb87e1c657ca11423e29ee2fbf896257f81556e554951725762241c308ad14c721e89d3ce245cfcc41cac02982830d49925a0a261d627a0195358de54c091aa396d0b84cbdb380da2b0f4a442d22cd93b9cf2951a50d9951947163a6301fc54664886407ee9eb0d4a4d8309517c60bda918dc0269d8db6cc81d989f61efe36ae8ec0c892c1624f3a34920c25f4fa71b9015ec327b66823b6a1e948cc0e00d6072575cda06da9c42271c70dbaef06a464647ee05300a4b7570f42f476ca623a6ad236e68d9bca86b0c535755d949d537df4e501fcd9d198a021996416c25b4c8fa681be41586ac8e5db9576a9b0c36e2b863c5be81e3b75cd578b7ae9ee700902fb5d5d8d54a78d3a2eec9482f59f8a141e3cf69d15dae24ce29eac0ab8b5bcae10dddf41d65da0dab81427dab210a4dea17ef6015b12f7724e54a515cd03c858009daf9a5e027afc092835091bf0dabf6cf01c3ab8cbb9817d6023df17e1036b73dab3654d2fbda61d95ff50d803a3314079a14c89f22e8b01a4f1da43871a88589f2bba4467d2dc9eb8fdd81375ffc328a2ea9a7c3334eda77982ed0252fb8da5ef99cfccaa1044bbab0eb3a5cbdeba424604410d3b6dee2ab2d7ec53366b4e445fae0b09ac0d57aa3c88222c4be0a3978947419eb2df156a88e98768988f591ab8e0cd53ff66e293cd1dc07605f2427f290672c433a45e9d793a2b8e9b938cb6f66e6672e8b3dfe13ffa4edb58f122123fe456f3ed661d90a87dba833967a283e4cde64897397bdb7cdd2bd78c0bbb4dec678bd101ccf345a47746cd9ac9d98c37ee8e9da0fdd736658d276576caee5d22693612920b3ecd2b608adee7e1c5474eb67405c90df7aa6c90e2687938fc80c9c008fb645534c85f5807feedcac51adeb5839259be7056c2ce745e51d1ade262c6481dbe6867112c9e4ae12e189594e0eea74dfc0e5ffdf1beaf10cfe5b45ccf413fdd66fba5b61e513fd36b114243a64df2e0be1011c65b47efb25f11fcdc05864c99c0788f313333a72062fa6f635f1b09a3eded13a777aedd82d95191b8dedf963576b608cbdc9a2bc14c0d18b84cca741b88551526ab342a3232fff80a974a6e0a2a40c222d6b6c4b016c3c459f9cc7f20799d2c5206051258d7b65c8784e0a7b8e0375a143f929f87231cb23c0c2ebff599e7a889bc4e280a3cc54f15e71f0cca126d5563b14e7c976e78c64cbaafbedda0cd392b62ae562969fb00013debcb4ee816f09557764897252749d95f0b96669c3e0d48f03a0b18a2cb6c4310df11968acb0dc4fbd79b7726aad24b92fc254a97ba72904635b93bbcee8585b11ba772067e8bc020d1d590133a598f10358e6f9a0c193ab56f2a42769c52bce4f3d7e50e4911b5b8358b77cde7699b07c0cab36b9d17472e0c471c1f2622124df9983cd8db958d2a64b1307e66f68152adac4146bb71b3da9040f69f064f5ebc8dd7af897680c8fd9887609d814457b9a2541b1881eaffabf8e20f91b95a4da03b6b32ff8f07b43b8e6eaae830d014685233a71fc2ca28310008a57a669bdb437ef2f299f78521c3e7dcc39ec87b46834e91f57df24e945dff2ad489908b053010a2ab43bd5ee2a81d318f910b7ee4cf2433638863f16c72834ed5a3e0753541ebdc98339084b2bf3708a5e17c58a3329f7cb19461027252223c12421507f4b4c80fb856d6889ef1d113a01c8235d33b25207180fe29f750033a4fc90fbb234f1930f2c4ced57993bd6e170d3cb73071688631a37f9fd3842c94dd487acacb624fdd881cd3ae43e679ee7535b4ba0300f547954a38d9874bda74801632c3c5c2918b123deb7190041963ab08e24af6acaf6e95bf9a3cdb10ed4be671995d49dd053c1493a7b21e335219450a011dba69a9df581f13377f63191148fb7ae8aef4ff88aa5d278ea7c35dc154b2921ee8a5b89a7b48af1d3155ed1a0fc296d21291f258bb364014254a21b040984de985d2b0311c496f1064e8bb750846ee9303c577dd149ae27831ff120b71f1551d816400e1757fdb194000e741446b31923fc33f698f1ee9c4b3c1cebaab8b0861c1a373a6b0859001ea4c47fb7c9c1d8473be077409877194816e999b5f7712e91b2fe67fcc31d217c5b39ed511e3797fc80f82fe10fdb1449aab1fa3bb871bc55cc8879a75438e63f4789fb4ab63ba3a6c1ea8674e13d6f8f958206b88bb6fc2d4fa5000261f572526002f5bda485a9f2eea84947ddfd150f5109c6418cdda35640aa7b8a7b2abefe12a7a6e386b2c136ab401e5b734b4a061e3144a8faff2fb3a5ca140ce66cfda68370353615b01f0da757d6723f2c8781bc9dd4db79006ee8bb5e50d713d2040bf1d2d3141faf39b89c13de231ab50244cf356655e391702fb56f91efdd7650baa3108b785d88d31610057f37b6d05fddc28ddabdf0de777158e5435e7826d7d21b2eba3433c170d92d2461ee96ee372aa077dd78c881b015498f26afc6d79de0705bc6f3e40ec482a060b7fb35db684d6fcbc44b68d3b1cb2678c349271ff2396bce832e6d08e0f7a25d73ff14ccb2c54c68c40d02d998d75913f19e84c3dcd49fd93703498769312ed2b43c5f5f4d0b8e46e466916ff8a119770b537fc7ea5d421a479ad9297a697b4e730d47b60eed55a18efa4ed2630145ffc9630ef0d3ceb3b589460c272b7bdcce8b37ebad760df819bae5b44a5f89d89e41327be2fa3890914c3bf51ee50cb91f1faa118f03f731236723c4317ad0433a0960244e2d08766049f61d822c6f7fadea37b25650cce07f35c6917f675d6199bd23b2b8b3652ca42ed6d76dffa0808e6106b279693c843622c3c91259ce043036368597e485b657d861e7b1b1fc6cb750704dee5abdd19102e61935d6ead2be781ff8e76f685be3e01afe71f7be0f2d11c537b36b3e5657693bdee3250b3edcb87c4814eb6789cc109ddeeb20c4c7c0548a159e1be3ce398f2e7478191c2f86df874970cb98457b97f2ae296c79a939580b2e9401950f4c55f01c958f46e1f4f5d7363df5567750fc3535e27924fbcc74aaa06e807940ca6e050d08447b20ecd0ed3d5dffe600edd76f7b5e3d4e2211e61f2f90e24b4266e2d919986525b734999ac4c08d26aed816fde68568162051857cab7e444b39bb0934e53d35d22983bac094b00cd44d15a54b86b08d1eb5480bfc404a3a7002f18fa7d74646bafed15584e8c6756b0f575a4262f2caf5d1d26340eb97dcb3bb2cbdbc0357d1675bfe973de6ae98fdde5d19507eec4be6f041f62ef048b531f63691e0e965f35093427b89ec1f95866d109bad0d4fcc522f90cb5f5a8f4f8bef6744e91f8ef06a43ee601b51a37e8c3f953d633d490ac98ce7820552a1be2b6409b6f0d66ff492e27c828f2b20dd6d63926ab308fd8d219465f40a93f8f341bf3b6e0f1eceb9d248ed6af97e8d43204277cdb78c6639634de519203c7a598e2cf55468df640f46b52d7565d719ee345599f1cbf28401e0742a41e150c3bde2c83dd255d04996ae15e9c4947d8f3d07f0b301055c10b91290a4cb966e1abdf4fe080b6995e63a55bcf67a87df4a72db015f3d74b6cc52ffda1e8b7713ecbda69e767b1e73ddd30e2feb32879f18905313f512db4e2fb7511536365984477b796d0423badfe639bd70ad75b8d7a3bde1d6150d794ee90673ef04592df3554c19cc9fd454bf671dc08265c740f74f04f5e3c7d92c9ac17b6d21a45ebe09bc51502d328b46a91433dd77f4f77afcb21a1a1f5414a572ce2df3bff431ba32865f23c4dcce49a62e08cbfe5ce24c1f7f608d0dcfd93cea4f8381929d7770878a611159c1a6422fa58268fa2d6c6290f8129ef9b4f7f2923bdda8801d3893f9e8aefd70ab9a1e5171dae3e56a01781f462a2533b4731838597e827a8a947502fdf88dc26ec80e1da08be9ff6191f8e46df0cee2c56776c7d3246c779315aa18c185c531f428471d2be20a3473b9403791035c8ea56461a3ebf3f36fb557ee05e363ca1e2d3a08087401e0d4c006db09811bc89f125fba7b5d04fef58c99c5f31213b0e365bce4cf85940555349931e478b04b6126d237477a6cffa2e5a6b2d8d3f2b022a173dc747c38d76bc8d2456c92aa2fad3692fa32e4fb241f7e23e7b3a1e40040a134fe1b662eb1462b7e2dc9d81cbc345079db896280386cc9ac4ccb6f0b4fe442b8e8bbdab9d76002b8d9240606a0a69734e38b2a6f0f407c32cf145f2376a8b0b5ce6286dec015029c63c4c756028feb6e931beea36f59d97495711287d96091b381d6f22bb77fd58402f2562e3b05901644744713d9cf1891ce633dfc2db4473e36eac719e999ecf8fcb3f6f5db5f33b01adb1f0c663476551a13e573db9a50fb34ab3a9a09ed3459d56d42eb648d1f228628b1969295905674f5c78619c0aa8be590a5b2b1e57014790075ed250010da73a112856e13e0bbad2ea22f5eb1ec3556151a889cdad57d45db692716a5457cb20c3bcd5e0da212668cd81c1733d0f162d07ca27bc195270b9b6193ca255e1a73d711ea0dc", 0x1000}, {&(0x7f0000000540)="17305e1d94c18a539329733029e240aa38bc054ff07cd6f43ba3747db7bcec0b295755623e331ddddf7cf07e70447f72f713e6932dabd56389c807a8ec456bcdefa23fb1adf5e2504c114aa91cc3c158414d19f95a939deadd16a83be54f7461b8d6367880cbbd245fa06b00e073b7b22c675dcf5e2ac49c072c87fa9f6c280f2d552f47686f942019ca602e1c035fe74503e1ab7900d6", 0x97}, {&(0x7f0000001640)="9cd049471a95cc355c0bdc3452d4036a4ab860427994ad2e68678df382143b8c5123a54fb1a2d3a863b2f192867f79f931cb9e1dd20e33e320eadf4264de942091de84222b383293f333533df4d75360e1c921e147d2be7a890bb39838b6ccfe56ba8086b6b1a2dbf22772fe242d9f97b174f425ed14dfa335152f02e5fecb39f86d5f844e6e3778e8087908b99e3bff30ea3945e142d554fa5036a762c00c2f2e31755383faac1653eb9e40fbb619ecb41b0ba427486a706d02f6b5929ae77515d076b7888d0e3202183e852228a888b41e3c10dd06a1194040e1f319f6d705915f", 0xe2}], 0x3, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}], 0x38, 0x20000801}, 0x24000080) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r11 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r11) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x24a) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000540)={0x6, 0x118, 0xfa00, {{0x1, 0x3, "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", 0x1c, 0xff, 0x6, 0x9, 0x1, 0x1000, 0x1a}}}, 0x120) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:55 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x302280, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x2, r2}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:42:55 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsetxattr$security_ima(r3, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@sha1={0x1, "c2d4508955678de3653007ab34b086caf8232f55"}, 0x15, 0x3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:55 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tu\xe8i', 0x60880, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:event_device_t:s0\x00', 0x5, 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3}) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/77, 0x4d}], 0x1, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) [ 520.747784][ T26] audit: type=1804 audit(1567741375.854:195): pid=30397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/488/file0/file0" dev="loop0" ino=1044 res=1 [ 520.890096][ T26] audit: type=1804 audit(1567741375.894:196): pid=30401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/488/file0/file0" dev="loop0" ino=1044 res=1 [ 520.956456][T30433] SELinux: Context syste is not valid (left unmapped). [ 521.011141][ T26] audit: type=1400 audit(1567741376.064:197): avc: denied { mac_admin } for pid=30431 comm="syz-executor.5" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 03:42:56 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(r1, 0xa020000) 03:42:56 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x600) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:56 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:56 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000000000000000000000000000000000000000005fbeb60eb2eca1730c386cf64115a3173a95f1792d6a1fb9128f26ba5ed1c77ecd4905d364c85ce04f3cf1e90166601c018b0e9c854b5a195751896331224f74e4fda383191878c47d06bea3588b901945ff7779be5463"]) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000340)={0x5e, @multicast1, 0x4e22, 0x0, 'sed\x00', 0x0, 0xfffffffffffffffd, 0x6d}, 0x2c) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00') socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 521.165062][ T26] audit: type=1400 audit(1567741376.114:198): avc: denied { associate } for pid=30431 comm="syz-executor.5" name="video2" dev="devtmpfs" ino=18391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 srawcon="syste" [ 521.230635][ T26] audit: type=1804 audit(1567741376.164:199): pid=30396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/396/file0/file0" dev="loop2" ino=1045 res=1 [ 521.232381][T10320] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 521.265660][ T26] audit: type=1804 audit(1567741376.184:200): pid=30400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/396/file0/file0" dev="loop2" ino=1045 res=1 [ 521.270921][T10320] FAT-fs (loop1): Filesystem has been set read-only [ 521.388312][ T26] audit: type=1804 audit(1567741376.494:201): pid=30444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/452/file0/file0" dev="loop4" ino=1050 res=1 [ 521.422777][ T26] audit: type=1804 audit(1567741376.504:202): pid=30447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/452/file0/file0" dev="loop4" ino=1050 res=1 03:42:56 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_AIE_ON(r2, 0x7001) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:56 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x101400, 0x0) accept$alg(r0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.evm\x00', &(0x7f0000000340)=@sha1={0x1, "68f5b01da817f1c00432b6eda190161d619fb3f3"}, 0x15, 0x2) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000380)={@null, @null, 0x2, 0x20}) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:56 executing program 5: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfffffff6) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:56 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='\x00t\x00', &(0x7f00000001c0)='./file0\x00', 0x27b15de, 0x0, &(0x7f0000000140), 0xd040, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1e7) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x2000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:57 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x60002, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:57 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x600) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:57 executing program 5 (fault-call:11 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 522.206516][ T26] audit: type=1804 audit(1567741377.314:203): pid=30501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/490/file0/file0" dev="sda1" ino=16550 res=1 03:42:57 executing program 3: mkdir(0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xfffffffffffffe01, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000200)={0x7, 0x4, 0x5, 0x3, 'syz1\x00', 0x1f}) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 522.412463][T30522] FAULT_INJECTION: forcing a failure. [ 522.412463][T30522] name failslab, interval 1, probability 0, space 0, times 0 [ 522.472313][T30522] CPU: 1 PID: 30522 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 522.480234][T30522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.490286][T30522] Call Trace: [ 522.493647][T30522] dump_stack+0x172/0x1f0 [ 522.497988][T30522] should_fail.cold+0xa/0x15 [ 522.502568][T30522] ? __f_unlock_pos+0x19/0x20 [ 522.507246][T30522] ? fault_create_debugfs_attr+0x180/0x180 [ 522.513057][T30522] ? page_to_nid.part.0+0x20/0x20 03:42:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x3000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 522.518083][T30522] ? ___might_sleep+0x163/0x280 [ 522.522938][T30522] __should_failslab+0x121/0x190 [ 522.527880][T30522] should_failslab+0x9/0x14 [ 522.532379][T30522] kmem_cache_alloc+0x2aa/0x710 [ 522.537239][T30522] ? __kasan_check_write+0x14/0x20 [ 522.542388][T30522] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 522.547926][T30522] getname_flags+0xd6/0x5b0 [ 522.552408][T30522] getname+0x1a/0x20 [ 522.556291][T30522] do_sys_open+0x2c9/0x5d0 [ 522.560708][T30522] ? filp_open+0x80/0x80 [ 522.564990][T30522] ? retint_kernel+0x2b/0x2b [ 522.569575][T30522] __x64_sys_creat+0x61/0x80 [ 522.574157][T30522] do_syscall_64+0xfd/0x6a0 [ 522.579606][T30522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 522.585524][T30522] RIP: 0033:0x459879 [ 522.589398][T30522] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 522.609024][T30522] RSP: 002b:00007fe71fbdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 03:42:57 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000240)={'hwsim0\x00', 0xffffffffffff0001}) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 522.617413][T30522] RAX: ffffffffffffffda RBX: 00007fe71fbdac90 RCX: 0000000000459879 [ 522.625367][T30522] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 522.633317][T30522] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 522.641268][T30522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe71fbdb6d4 [ 522.649219][T30522] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000005 03:42:57 executing program 5 (fault-call:11 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:57 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x215f8ab880dedeae, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 523.054412][T30557] FAULT_INJECTION: forcing a failure. [ 523.054412][T30557] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.067652][T30557] CPU: 0 PID: 30557 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 523.075540][T30557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.085592][T30557] Call Trace: [ 523.088891][T30557] dump_stack+0x172/0x1f0 [ 523.093234][T30557] should_fail.cold+0xa/0x15 [ 523.097833][T30557] ? fault_create_debugfs_attr+0x180/0x180 [ 523.103642][T30557] ? perf_trace_lock+0xeb/0x4c0 [ 523.108503][T30557] should_fail_alloc_page+0x50/0x60 [ 523.113703][T30557] __alloc_pages_nodemask+0x1a1/0x900 [ 523.119077][T30557] ? __f_unlock_pos+0x19/0x20 [ 523.123757][T30557] ? __alloc_pages_slowpath+0x2520/0x2520 [ 523.129471][T30557] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 523.135101][T30557] ? __kasan_check_read+0x11/0x20 [ 523.140134][T30557] ? fault_create_debugfs_attr+0x180/0x180 [ 523.145941][T30557] cache_grow_begin+0x90/0xd20 [ 523.150698][T30557] ? getname_flags+0xd6/0x5b0 [ 523.155374][T30557] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 523.161606][T30557] kmem_cache_alloc+0x64e/0x710 [ 523.166458][T30557] getname_flags+0xd6/0x5b0 [ 523.170955][T30557] getname+0x1a/0x20 [ 523.174848][T30557] do_sys_open+0x2c9/0x5d0 [ 523.179262][T30557] ? filp_open+0x80/0x80 [ 523.183508][T30557] __x64_sys_creat+0x61/0x80 [ 523.188096][T30557] do_syscall_64+0xfd/0x6a0 [ 523.192594][T30557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 523.198481][T30557] RIP: 0033:0x459879 [ 523.202371][T30557] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 523.221974][T30557] RSP: 002b:00007fe71fbdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 523.230385][T30557] RAX: ffffffffffffffda RBX: 00007fe71fbdac90 RCX: 0000000000459879 [ 523.238356][T30557] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 523.246308][T30557] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 523.254262][T30557] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe71fbdb6d4 [ 523.262216][T30557] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000005 03:42:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:42:58 executing program 5 (fault-call:11 fault-nth:2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:58 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = getpgid(0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000200)=[{&(0x7f0000002940)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x22c8}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}], 0x40, 0x80}, 0x80) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r11 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r11) r12 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r12, 0x1, 0x0, 0x369e5d84) r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f00000002c0)) perf_event_open(0x0, r13, 0x0, 0xffffffffffffffff, 0x0) r14 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r14, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r14, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r15 = fcntl$getown(r14, 0x9) getpgrp(r15) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r16 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r16) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 523.579239][ T26] audit: type=1804 audit(1567741378.694:204): pid=30572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/491/file0/file0" dev="loop0" ino=1056 res=1 [ 523.636521][T30591] FAULT_INJECTION: forcing a failure. [ 523.636521][T30591] name failslab, interval 1, probability 0, space 0, times 0 [ 523.693462][T30591] CPU: 1 PID: 30591 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 523.701395][T30591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.711457][T30591] Call Trace: [ 523.714753][T30591] dump_stack+0x172/0x1f0 [ 523.719098][T30591] should_fail.cold+0xa/0x15 [ 523.723701][T30591] ? fault_create_debugfs_attr+0x180/0x180 [ 523.729516][T30591] ? page_to_nid.part.0+0x20/0x20 [ 523.734545][T30591] ? ___might_sleep+0x163/0x280 [ 523.739401][T30591] __should_failslab+0x121/0x190 [ 523.744339][T30591] should_failslab+0x9/0x14 [ 523.748844][T30591] kmem_cache_alloc+0x2aa/0x710 [ 523.753705][T30591] __alloc_file+0x27/0x340 [ 523.758128][T30591] alloc_empty_file+0x72/0x170 [ 523.762895][T30591] path_openat+0xef/0x4630 [ 523.767307][T30591] ? save_stack+0x23/0x90 [ 523.771632][T30591] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 523.777433][T30591] ? kasan_slab_alloc+0xf/0x20 [ 523.782188][T30591] ? kmem_cache_alloc+0x121/0x710 [ 523.787213][T30591] ? getname_flags+0xd6/0x5b0 [ 523.791888][T30591] ? getname+0x1a/0x20 [ 523.795951][T30591] ? do_sys_open+0x2c9/0x5d0 [ 523.800539][T30591] ? __x64_sys_creat+0x61/0x80 [ 523.805297][T30591] ? do_syscall_64+0xfd/0x6a0 [ 523.809979][T30591] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 523.816057][T30591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 523.822298][T30591] ? debug_smp_processor_id+0x3c/0x214 [ 523.827767][T30591] ? perf_trace_lock+0xeb/0x4c0 [ 523.832618][T30591] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 523.837991][T30591] ? __lockdep_free_key_range+0x120/0x120 [ 523.843704][T30591] ? retint_kernel+0x2b/0x2b [ 523.848290][T30591] ? trace_hardirqs_on_caller+0x6a/0x240 [ 523.853920][T30591] ? retint_kernel+0x2b/0x2b [ 523.858506][T30591] ? retint_kernel+0x2b/0x2b [ 523.863092][T30591] ? trace_hardirqs_on_caller+0x6a/0x240 [ 523.868717][T30591] do_filp_open+0x1a1/0x280 [ 523.873214][T30591] ? may_open_dev+0x100/0x100 [ 523.877887][T30591] ? lock_downgrade+0x920/0x920 [ 523.882735][T30591] ? rwlock_bug.part.0+0x90/0x90 [ 523.887671][T30591] ? __kasan_check_read+0x11/0x20 [ 523.892687][T30591] ? do_raw_spin_unlock+0x57/0x270 [ 523.897802][T30591] do_sys_open+0x3fe/0x5d0 [ 523.902216][T30591] ? filp_open+0x80/0x80 [ 523.906459][T30591] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 523.912519][T30591] ? trace_hardirqs_off_caller+0x65/0x230 [ 523.918233][T30591] __x64_sys_creat+0x61/0x80 [ 523.922819][T30591] do_syscall_64+0xfd/0x6a0 [ 523.927322][T30591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 523.933207][T30591] RIP: 0033:0x459879 [ 523.937098][T30591] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 523.956696][T30591] RSP: 002b:00007fe71fbdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 523.966838][T30591] RAX: ffffffffffffffda RBX: 00007fe71fbdac90 RCX: 0000000000459879 [ 523.974806][T30591] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 523.982759][T30591] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:42:59 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) connect$netrom(r2, &(0x7f0000000380)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000001c0)={@loopback}, &(0x7f0000000200)=0x14) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000340)={0x4000, 0x6000, 0x6, 0x1000, 0x10001}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) sendto$x25(r4, &(0x7f0000000240)="a2d26c23b8136281be800709b660133d2ea8d7cc7dd453e12b7674d84966aadf87c45f2d95cd96d1f3a6f20708106ca9", 0x30, 0x1, &(0x7f0000000280)={0x9, @remote={[], 0x0}}, 0x12) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 523.990709][T30591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe71fbdb6d4 [ 523.998658][T30591] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000005 03:42:59 executing program 5 (fault-call:11 fault-nth:3): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:59 executing program 1 (fault-call:12 fault-nth:0): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:42:59 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) recvfrom$unix(r3, &(0x7f00000001c0)=""/43, 0x2b, 0x2041, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 524.255629][T10320] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 524.278422][T10320] FAT-fs (loop1): Filesystem has been set read-only [ 524.326868][T30615] FAULT_INJECTION: forcing a failure. [ 524.326868][T30615] name failslab, interval 1, probability 0, space 0, times 0 [ 524.393015][T30615] CPU: 1 PID: 30615 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 524.400928][T30615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.400933][T30615] Call Trace: [ 524.400953][T30615] dump_stack+0x172/0x1f0 [ 524.400976][T30615] should_fail.cold+0xa/0x15 [ 524.423191][T30615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.429438][T30615] ? fault_create_debugfs_attr+0x180/0x180 [ 524.435242][T30615] ? page_to_nid.part.0+0x20/0x20 03:42:59 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x1800, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000a00000/0x600000)=nil, 0x1e76b3f7e83c4d66) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000600)=""/143) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x4, 0x40000000000008, 0x319, 0x0, 0x0, {}, [@typed={0x8, 0x2, @pid}, @typed={0x34, 0x3, @str='keyringeth0vmnet1cgroupppp1[eth0vboxnet1user\x00'}]}, 0x50}}, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) kexec_load(0x0, 0x5, &(0x7f0000000540)=[{&(0x7f00000001c0)="7ecbb49fa3d31ebfdac95be0ca2615bcbf24d5057207", 0x16, 0x100000000, 0x9}, {&(0x7f0000000340)="3b311c885e6f46a37a23a342be233c5de5fed62dd7564eb25c44833b93669cac02c149409ec1212270495f9783c5dac61f64c8b0b1ee1e55cc35b48fb1c8022fa6986d5e84511e1ff5b8009203842e7c39e601f351aef521068bb48b3d732ace0b00b81fbf2b25f7ba3440e707eb69f5dee27d15e74b3c8dd8f29316ee4b46f9a339dae424596f41862de9e148568baa1fe1fe730f04a456eb4a7b6da3ecf694a24152d03f3f49445be6fd07f1d010236a8af93d", 0xb4, 0x5, 0x7}, {&(0x7f0000000240)="a672fedeac12ced070173744f7a0449ac48f155f6a9f13b70c381df5984e47c69df4787451ab7d5678d6a906782584f3c80d1d2619bd4fc774c7a72a91ae6bfa1b62fe6ed55fd7d5621eb03e89d540f87694ce52300dd7cd55bdd98f64300ad65731748ce5c7e82f9f", 0x69, 0xc01b, 0x815a}, {&(0x7f0000000400)="220c695dbe6901ded641b35838af63a165fe8e6996e0ef2d67764b27a55b", 0x1e, 0x8, 0x6491}, {&(0x7f0000000440)="a205fb9a0d5feb83b582ee0274acf26238b727f497356ed294402a8173b91657a7a4648fe7ea05a8ea8202590455e63ca6a17b3a72a1aca09bbef49011c7bdd8c06040b884721fe5eba0c095bd43278c62f49193d41c1829710f009c70462b2e502e4996f39d3ffdcc8b3f2664ef6a702006fdba28b226939d2c4c2b4a51abe1d10d07d76c33599422a02e50cc8a30d46ed448b7b6c6988c6363207169ef1469b8d0e19efbf65d92d11a4de5e27d47a702d47e67d79ba9bc063a80874e7cb3baac2d7f070468aeafc92afa16514ee4178957b2bd16683cd76552a0fe5af92232e7107fdae1", 0xe5, 0x6, 0x9}], 0x160000) setxattr$security_smack_entry(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='security.SMACK64EXEC\x00', &(0x7f0000000740)='{:ppp1\x00', 0x7, 0x2) [ 524.435262][T30615] ? ___might_sleep+0x163/0x280 [ 524.445107][T30615] __should_failslab+0x121/0x190 [ 524.450049][T30615] should_failslab+0x9/0x14 [ 524.454553][T30615] kmem_cache_alloc+0x2aa/0x710 [ 524.459407][T30615] ? perf_trace_lock+0xeb/0x4c0 [ 524.464260][T30615] ? avc_has_perm_noaudit+0x38d/0x560 [ 524.469635][T30615] __d_alloc+0x2e/0x8c0 [ 524.473798][T30615] d_alloc+0x4d/0x280 [ 524.477782][T30615] d_alloc_parallel+0xf4/0x1c30 [ 524.482641][T30615] ? trace_hardirqs_on_caller+0x6a/0x240 [ 524.488299][T30615] ? __this_cpu_preempt_check+0x3a/0x210 [ 524.493950][T30615] ? __d_lookup_rcu+0x6c0/0x6c0 [ 524.498809][T30615] ? d_lookup+0x16f/0x260 [ 524.503144][T30615] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 524.508869][T30615] ? d_lookup+0x19e/0x260 [ 524.513206][T30615] lookup_open+0x525/0x1a50 [ 524.517719][T30615] ? vfs_link+0xb90/0xb90 [ 524.522063][T30615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 524.528303][T30615] ? __mnt_want_write+0x1f1/0x2f0 [ 524.533332][T30615] path_openat+0x14ac/0x4630 [ 524.537920][T30615] ? save_stack+0x23/0x90 03:42:59 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 524.542251][T30615] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 524.544123][T10317] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 524.548053][T30615] ? kasan_slab_alloc+0xf/0x20 [ 524.561263][T30615] ? kmem_cache_alloc+0x121/0x710 [ 524.566286][T30615] ? getname_flags+0xd6/0x5b0 [ 524.567310][T10317] FAT-fs (loop0): Filesystem has been set read-only [ 524.570963][T30615] ? getname+0x1a/0x20 [ 524.570986][T30615] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 524.571004][T30615] ? __lockdep_free_key_range+0x120/0x120 [ 524.571017][T30615] ? retint_kernel+0x2b/0x2b [ 524.571034][T30615] ? trace_hardirqs_on_caller+0x6a/0x240 [ 524.602948][T30615] ? retint_kernel+0x2b/0x2b [ 524.607518][T30615] ? trace_hardirqs_on_caller+0x6a/0x240 [ 524.613133][T30615] do_filp_open+0x1a1/0x280 [ 524.617614][T30615] ? may_open_dev+0x100/0x100 [ 524.622273][T30615] ? retint_kernel+0x2b/0x2b [ 524.626847][T30615] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 524.632295][T30615] do_sys_open+0x3fe/0x5d0 [ 524.636692][T30615] ? filp_open+0x80/0x80 [ 524.640912][T30615] ? retint_kernel+0x2b/0x2b [ 524.645483][T30615] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 524.651526][T30615] ? trace_hardirqs_off_caller+0x65/0x230 [ 524.657226][T30615] __x64_sys_creat+0x61/0x80 [ 524.661798][T30615] do_syscall_64+0xfd/0x6a0 [ 524.666282][T30615] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 524.672152][T30615] RIP: 0033:0x459879 03:42:59 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0xfffffe44, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 524.676029][T30615] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.695617][T30615] RSP: 002b:00007fe71fbdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 524.704016][T30615] RAX: ffffffffffffffda RBX: 00007fe71fbdac90 RCX: 0000000000459879 [ 524.711966][T30615] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 524.719919][T30615] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 524.727870][T30615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe71fbdb6d4 [ 524.735822][T30615] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000005 03:42:59 executing program 5 (fault-call:11 fault-nth:4): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 524.842674][T30633] FAULT_INJECTION: forcing a failure. [ 524.842674][T30633] name failslab, interval 1, probability 0, space 0, times 0 [ 524.855410][T30633] CPU: 0 PID: 30633 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 524.863321][T30633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.873358][T30633] Call Trace: [ 524.876631][T30633] dump_stack+0x172/0x1f0 [ 524.880946][T30633] should_fail.cold+0xa/0x15 [ 524.885519][T30633] ? __f_unlock_pos+0x19/0x20 [ 524.890210][T30633] ? fault_create_debugfs_attr+0x180/0x180 [ 524.896033][T30633] ? page_to_nid.part.0+0x20/0x20 [ 524.901041][T30633] ? ___might_sleep+0x163/0x280 [ 524.905894][T30633] __should_failslab+0x121/0x190 [ 524.910820][T30633] should_failslab+0x9/0x14 [ 524.915320][T30633] kmem_cache_alloc+0x2aa/0x710 [ 524.920151][T30633] ? __this_cpu_preempt_check+0x3a/0x210 [ 524.925758][T30633] ? retint_kernel+0x2b/0x2b [ 524.930326][T30633] getname_flags+0xd6/0x5b0 [ 524.934821][T30633] getname+0x1a/0x20 [ 524.938691][T30633] do_sys_open+0x2c9/0x5d0 [ 524.943082][T30633] ? filp_open+0x80/0x80 [ 524.947313][T30633] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 524.953365][T30633] ? trace_hardirqs_off_caller+0x65/0x230 [ 524.959071][T30633] __x64_sys_creat+0x61/0x80 [ 524.963639][T30633] do_syscall_64+0xfd/0x6a0 [ 524.968118][T30633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 524.973983][T30633] RIP: 0033:0x459879 [ 524.977855][T30633] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 524.997435][T30633] RSP: 002b:00007fe7a62c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 525.005823][T30633] RAX: ffffffffffffffda RBX: 00007fe7a62c0c90 RCX: 0000000000459879 [ 525.013786][T30633] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 525.021739][T30633] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 525.029700][T30633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7a62c16d4 [ 525.037661][T30633] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000007 03:43:00 executing program 1 (fault-call:12 fault-nth:1): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 525.290125][T30662] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 03:43:00 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$P9_RMKNOD(r0, &(0x7f00000001c0)={0x14, 0x13, 0x2, {0x2, 0x3, 0x4}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)={{0x3f, 0x2}, {0x3, 0xff}, 0xfffffffffffffffc, 0x0, 0x51}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 525.367949][T30662] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 525.397396][T30640] FAULT_INJECTION: forcing a failure. [ 525.397396][T30640] name failslab, interval 1, probability 0, space 0, times 0 [ 525.472984][T30640] CPU: 0 PID: 30640 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 525.480904][T30640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.490960][T30640] Call Trace: [ 525.494258][T30640] dump_stack+0x172/0x1f0 [ 525.498597][T30640] should_fail.cold+0xa/0x15 [ 525.503196][T30640] ? fault_create_debugfs_attr+0x180/0x180 [ 525.509009][T30640] ? save_stack+0x5c/0x90 [ 525.513338][T30640] ? save_stack+0x23/0x90 [ 525.517667][T30640] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 525.523496][T30640] ? kasan_slab_alloc+0xf/0x20 [ 525.528255][T30640] ? ___might_sleep+0x163/0x280 [ 525.533106][T30640] __should_failslab+0x121/0x190 [ 525.538045][T30640] should_failslab+0x9/0x14 [ 525.542546][T30640] __kmalloc+0x2e0/0x770 [ 525.546783][T30640] ? mark_held_locks+0xf0/0xf0 [ 525.551544][T30640] ? __this_cpu_preempt_check+0x3a/0x210 [ 525.557164][T30640] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 525.562883][T30640] tomoyo_realpath_from_path+0xcd/0x7b0 [ 525.568426][T30640] ? tomoyo_path_number_perm+0x193/0x520 [ 525.574061][T30640] tomoyo_path_number_perm+0x1dd/0x520 [ 525.579510][T30640] ? tomoyo_path_number_perm+0x193/0x520 [ 525.585140][T30640] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 525.590938][T30640] ? __lockdep_free_key_range+0x120/0x120 [ 525.596650][T30640] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 525.602109][T30640] ? d_alloc_parallel+0x7de/0x1c30 [ 525.607227][T30640] ? __kasan_check_read+0x11/0x20 [ 525.612265][T30640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.618505][T30640] ? d_alloc_parallel+0xa78/0x1c30 [ 525.623613][T30640] ? __perf_event_task_sched_in+0x1cb/0x820 [ 525.629502][T30640] ? lock_downgrade+0x920/0x920 [ 525.634358][T30640] tomoyo_path_mknod+0x12d/0x1b0 [ 525.639290][T30640] ? tomoyo_path_chown+0x1c0/0x1c0 [ 525.644398][T30640] ? lookup_open+0x2c2/0x1a50 [ 525.649092][T30640] security_path_mknod+0x119/0x180 [ 525.654209][T30640] lookup_open+0x86b/0x1a50 [ 525.658712][T30640] ? vfs_link+0xb90/0xb90 [ 525.663053][T30640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.669283][T30640] ? __mnt_want_write+0x1f1/0x2f0 [ 525.674309][T30640] path_openat+0x14ac/0x4630 [ 525.678894][T30640] ? save_stack+0x23/0x90 [ 525.683216][T30640] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 525.689011][T30640] ? kasan_slab_alloc+0xf/0x20 [ 525.693767][T30640] ? kmem_cache_alloc+0x121/0x710 [ 525.698789][T30640] ? getname_flags+0xd6/0x5b0 [ 525.703465][T30640] ? getname+0x1a/0x20 [ 525.707542][T30640] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 525.712916][T30640] ? __lockdep_free_key_range+0x120/0x120 [ 525.718636][T30640] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 525.724101][T30640] do_filp_open+0x1a1/0x280 [ 525.728612][T30640] ? may_open_dev+0x100/0x100 [ 525.733292][T30640] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 525.738753][T30640] ? __this_cpu_preempt_check+0x3a/0x210 [ 525.744378][T30640] ? retint_kernel+0x2b/0x2b [ 525.748970][T30640] ? do_sys_open+0x302/0x5d0 [ 525.753559][T30640] do_sys_open+0x3fe/0x5d0 [ 525.757975][T30640] ? filp_open+0x80/0x80 [ 525.762217][T30640] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 525.768301][T30640] ? trace_hardirqs_off_caller+0x65/0x230 [ 525.774019][T30640] __x64_sys_creat+0x61/0x80 [ 525.778614][T30640] do_syscall_64+0xfd/0x6a0 [ 525.783125][T30640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 525.789006][T30640] RIP: 0033:0x459879 [ 525.792893][T30640] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 525.812485][T30640] RSP: 002b:00007fe71fbdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 525.820887][T30640] RAX: ffffffffffffffda RBX: 00007fe71fbdac90 RCX: 0000000000459879 [ 525.828850][T30640] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 525.836814][T30640] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 525.844779][T30640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe71fbdb6d4 [ 525.852739][T30640] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000005 [ 525.871747][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 525.871760][ T26] audit: type=1804 audit(1567741380.984:209): pid=30666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/456/file0/file0" dev="loop4" ino=1064 res=1 [ 525.910590][T30640] ERROR: Out of memory at tomoyo_realpath_from_path. 03:43:01 executing program 5 (fault-call:11 fault-nth:5): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 526.002540][T30665] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 03:43:01 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b14166a, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_bp={0x0}, 0x2104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 526.060609][T30665] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:43:01 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 526.159868][T30688] FAULT_INJECTION: forcing a failure. [ 526.159868][T30688] name failslab, interval 1, probability 0, space 0, times 0 [ 526.201084][T30688] CPU: 1 PID: 30688 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 526.209006][T30688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.219056][T30688] Call Trace: [ 526.222356][T30688] dump_stack+0x172/0x1f0 [ 526.226692][T30688] should_fail.cold+0xa/0x15 [ 526.231286][T30688] ? fault_create_debugfs_attr+0x180/0x180 [ 526.237102][T30688] ? ___might_sleep+0x163/0x280 [ 526.241954][T30688] __should_failslab+0x121/0x190 [ 526.246893][T30688] should_failslab+0x9/0x14 [ 526.251395][T30688] __kmalloc+0x2e0/0x770 [ 526.255641][T30688] ? mark_held_locks+0xf0/0xf0 [ 526.260408][T30688] ? __this_cpu_preempt_check+0x3a/0x210 [ 526.266037][T30688] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 526.268025][T30696] FAULT_INJECTION: forcing a failure. [ 526.268025][T30696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 526.271756][T30688] tomoyo_realpath_from_path+0xcd/0x7b0 [ 526.290547][T30688] ? tomoyo_path_number_perm+0x193/0x520 [ 526.296173][T30688] tomoyo_path_number_perm+0x1dd/0x520 [ 526.301616][T30688] ? tomoyo_path_number_perm+0x193/0x520 [ 526.307234][T30688] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 526.313026][T30688] ? __lockdep_free_key_range+0x120/0x120 [ 526.318730][T30688] ? lock_release+0x4c0/0x960 [ 526.323401][T30688] ? d_alloc_parallel+0x7de/0x1c30 [ 526.328495][T30688] ? __kasan_check_read+0x11/0x20 [ 526.333516][T30688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 526.339740][T30688] ? d_alloc_parallel+0xa78/0x1c30 [ 526.344838][T30688] ? lock_downgrade+0x920/0x920 [ 526.349684][T30688] tomoyo_path_mknod+0x12d/0x1b0 [ 526.354607][T30688] ? tomoyo_path_chown+0x1c0/0x1c0 [ 526.359710][T30688] security_path_mknod+0x119/0x180 [ 526.364810][T30688] lookup_open+0x86b/0x1a50 [ 526.369304][T30688] ? vfs_link+0xb90/0xb90 [ 526.373631][T30688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 526.379858][T30688] ? __mnt_want_write+0x1f1/0x2f0 [ 526.384884][T30688] path_openat+0x14ac/0x4630 [ 526.389457][T30688] ? save_stack+0x23/0x90 [ 526.393783][T30688] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 526.399570][T30688] ? kasan_slab_alloc+0xf/0x20 [ 526.404318][T30688] ? kmem_cache_alloc+0x121/0x710 [ 526.409327][T30688] ? getname_flags+0xd6/0x5b0 [ 526.413990][T30688] ? getname+0x1a/0x20 [ 526.418051][T30688] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 526.423417][T30688] ? __lockdep_free_key_range+0x120/0x120 [ 526.429122][T30688] ? retint_kernel+0x2b/0x2b [ 526.433695][T30688] ? trace_hardirqs_on_caller+0x6a/0x240 [ 526.439314][T30688] do_filp_open+0x1a1/0x280 [ 526.443804][T30688] ? may_open_dev+0x100/0x100 [ 526.448470][T30688] ? __kasan_check_read+0x11/0x20 [ 526.453476][T30688] ? do_raw_spin_unlock+0x57/0x270 [ 526.458581][T30688] do_sys_open+0x3fe/0x5d0 [ 526.462982][T30688] ? filp_open+0x80/0x80 [ 526.467215][T30688] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 526.473263][T30688] ? trace_hardirqs_off_caller+0x65/0x230 [ 526.478969][T30688] __x64_sys_creat+0x61/0x80 [ 526.483546][T30688] do_syscall_64+0xfd/0x6a0 [ 526.488045][T30688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 526.493923][T30688] RIP: 0033:0x459879 [ 526.497804][T30688] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 526.517389][T30688] RSP: 002b:00007fe71fbdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 526.525874][T30688] RAX: ffffffffffffffda RBX: 00007fe71fbdac90 RCX: 0000000000459879 [ 526.533832][T30688] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 526.541789][T30688] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:43:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x6000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 526.549746][T30688] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe71fbdb6d4 [ 526.557704][T30688] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000005 [ 526.565680][T30696] CPU: 0 PID: 30696 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 526.573574][T30696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.574886][T30688] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.583617][T30696] Call Trace: [ 526.583636][T30696] dump_stack+0x172/0x1f0 [ 526.583655][T30696] should_fail.cold+0xa/0x15 [ 526.583674][T30696] ? fault_create_debugfs_attr+0x180/0x180 [ 526.583688][T30696] ? perf_trace_lock+0xeb/0x4c0 [ 526.583703][T30696] ? debug_smp_processor_id+0x3c/0x214 [ 526.583725][T30696] should_fail_alloc_page+0x50/0x60 [ 526.583738][T30696] __alloc_pages_nodemask+0x1a1/0x900 [ 526.583753][T30696] ? __lockdep_free_key_range+0x120/0x120 [ 526.583769][T30696] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 526.583785][T30696] ? __alloc_pages_slowpath+0x2520/0x2520 [ 526.583797][T30696] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 526.583810][T30696] ? __kasan_check_read+0x11/0x20 [ 526.583829][T30696] ? fault_create_debugfs_attr+0x180/0x180 [ 526.583845][T30696] cache_grow_begin+0x90/0xd20 [ 526.583860][T30696] ? getname_flags+0xd6/0x5b0 [ 526.583876][T30696] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 526.583891][T30696] kmem_cache_alloc+0x64e/0x710 [ 526.583905][T30696] ? __this_cpu_preempt_check+0x3a/0x210 [ 526.583925][T30696] getname_flags+0xd6/0x5b0 [ 526.583941][T30696] getname+0x1a/0x20 [ 526.583953][T30696] do_sys_open+0x2c9/0x5d0 [ 526.583967][T30696] ? filp_open+0x80/0x80 [ 526.583985][T30696] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 526.583998][T30696] ? trace_hardirqs_off_caller+0x65/0x230 [ 526.584012][T30696] __x64_sys_creat+0x61/0x80 [ 526.584027][T30696] do_syscall_64+0xfd/0x6a0 [ 526.584044][T30696] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 526.584054][T30696] RIP: 0033:0x459879 03:43:01 executing program 1 (fault-call:12 fault-nth:2): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 526.584069][T30696] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 526.584076][T30696] RSP: 002b:00007fe7a62c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 526.584089][T30696] RAX: ffffffffffffffda RBX: 00007fe7a62c0c90 RCX: 0000000000459879 [ 526.584097][T30696] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 526.584105][T30696] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 526.584113][T30696] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7a62c16d4 [ 526.584120][T30696] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000006 [ 526.827663][T10320] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 526.842255][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 526.842784][T10320] FAT-fs (loop1): Filesystem has been set read-only 03:43:02 executing program 5 (fault-call:11 fault-nth:6): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 526.878340][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:43:02 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="37f1d7bb9a72dab4a45c01d5611a746c1d5519f42c1993f5f0e8d6a1fb18d8a2d5e28de9b0d115cc357ba837f1f189b4105f5ac78913356f24c68f133562b1a7acf5c033d34eb695c7759d7886155e65c8f0ed0667f2225ef2ea71df24aa5c008025e2bad5bcace19f0da21356a23a468ad6d06c30f148c1cb930e2f5273ee239c0682f7679ecf3d508b3027baf225a06f32fb7b3168216f8e4b7ac4771bef59d4b69874158835689dccc2d451c505a778dda69c42dc694b322fa587a981", 0xbe, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) keyctl$instantiate(0xc, r0, &(0x7f0000000340)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'security'}, 0x1e, 0xfffffffffffffff9) setxattr(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=@known='trusted.syz\x00', &(0x7f0000000400)='user\x00', 0x5, 0x3) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fchdir(r1) r4 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x44}) creat(&(0x7f0000000100)='./file1\x00', 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r6) keyctl$link(0x8, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x94100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) add_key(&(0x7f0000000540)='cifs.idmap\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000640)="3cbe3ebd83da036be57ad2461732fd4ff1b4a7c7e5ec26dfe2132c5010bc1357155f08f0fcf3d613d72cea98ebf395878731c65d0f4c7bf1edb32157a74527f32319e4c9a31a63c21c2c164c3478892aeb3861098b956ce197ea5e4bfe0bf3b6f24655e86330c8533c7599632da5868133263583cd1d0897f66e3a5d857383e23b46699af04809", 0x87, 0xfffffffffffffff8) r8 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') r9 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r9, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') keyctl$clear(0x7, r9) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f0000000200)="ce3c430596995635a24ade89febd67232b231b95434f0e1982644a3cbc67ceaa1c", 0x21, 0xffffffffffffffff, 0x0, 0x2}, &(0x7f0000000280)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:02 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:02 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 527.301646][T30716] FAULT_INJECTION: forcing a failure. [ 527.301646][T30716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.301658][T30729] FAULT_INJECTION: forcing a failure. [ 527.301658][T30729] name failslab, interval 1, probability 0, space 0, times 0 [ 527.314875][T30716] CPU: 1 PID: 30716 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 527.314885][T30716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.314890][T30716] Call Trace: [ 527.314910][T30716] dump_stack+0x172/0x1f0 [ 527.314931][T30716] should_fail.cold+0xa/0x15 [ 527.314954][T30716] ? fault_create_debugfs_attr+0x180/0x180 [ 527.314968][T30716] ? arch_stack_walk+0x97/0xf0 [ 527.314991][T30716] should_fail_alloc_page+0x50/0x60 [ 527.315012][T30716] __alloc_pages_nodemask+0x1a1/0x900 [ 527.378726][T30716] ? stack_trace_save+0xac/0xe0 [ 527.383585][T30716] ? __alloc_pages_slowpath+0x2520/0x2520 [ 527.389312][T30716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 527.395563][T30716] ? fault_create_debugfs_attr+0x180/0x180 [ 527.401369][T30716] ? save_stack+0x5c/0x90 [ 527.405700][T30716] cache_grow_begin+0x90/0xd20 [ 527.410465][T30716] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 527.416186][T30716] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 527.422428][T30716] __kmalloc+0x6b2/0x770 [ 527.426671][T30716] ? mark_held_locks+0xf0/0xf0 [ 527.431435][T30716] ? __kasan_check_read+0x11/0x20 [ 527.436464][T30716] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 527.442186][T30716] tomoyo_realpath_from_path+0xcd/0x7b0 [ 527.447735][T30716] ? tomoyo_path_number_perm+0x193/0x520 [ 527.453373][T30716] tomoyo_path_number_perm+0x1dd/0x520 [ 527.458833][T30716] ? tomoyo_path_number_perm+0x193/0x520 [ 527.464467][T30716] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 527.470273][T30716] ? __lockdep_free_key_range+0x120/0x120 [ 527.475990][T30716] ? d_alloc+0x1d0/0x280 [ 527.480242][T30716] ? d_alloc_parallel+0x7de/0x1c30 [ 527.485356][T30716] ? __kasan_check_read+0x11/0x20 [ 527.490393][T30716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 527.496631][T30716] ? d_alloc_parallel+0xa78/0x1c30 [ 527.501747][T30716] ? lock_downgrade+0x920/0x920 [ 527.506628][T30716] tomoyo_path_mknod+0x12d/0x1b0 [ 527.511564][T30716] ? tomoyo_path_chown+0x1c0/0x1c0 [ 527.516680][T30716] ? lookup_open+0x2c2/0x1a50 [ 527.521363][T30716] security_path_mknod+0x119/0x180 [ 527.526482][T30716] lookup_open+0x86b/0x1a50 [ 527.530992][T30716] ? vfs_link+0xb90/0xb90 [ 527.535339][T30716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 527.541584][T30716] ? __mnt_want_write+0x1f1/0x2f0 [ 527.546616][T30716] path_openat+0x14ac/0x4630 [ 527.551205][T30716] ? save_stack+0x23/0x90 [ 527.555537][T30716] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 527.561340][T30716] ? kasan_slab_alloc+0xf/0x20 [ 527.566102][T30716] ? kmem_cache_alloc+0x121/0x710 [ 527.571125][T30716] ? getname_flags+0xd6/0x5b0 [ 527.575801][T30716] ? getname+0x1a/0x20 [ 527.579878][T30716] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 527.585258][T30716] ? __lockdep_free_key_range+0x120/0x120 [ 527.590975][T30716] ? retint_kernel+0x2b/0x2b [ 527.595559][T30716] ? trace_hardirqs_on_caller+0x6a/0x240 [ 527.601188][T30716] do_filp_open+0x1a1/0x280 [ 527.605684][T30716] ? may_open_dev+0x100/0x100 [ 527.610361][T30716] ? __kasan_check_read+0x11/0x20 [ 527.615378][T30716] ? do_raw_spin_unlock+0x57/0x270 [ 527.620499][T30716] do_sys_open+0x3fe/0x5d0 [ 527.624919][T30716] ? filp_open+0x80/0x80 [ 527.629166][T30716] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 527.635230][T30716] ? trace_hardirqs_off_caller+0x65/0x230 [ 527.640946][T30716] __x64_sys_creat+0x61/0x80 [ 527.645533][T30716] do_syscall_64+0xfd/0x6a0 [ 527.650036][T30716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 527.655926][T30716] RIP: 0033:0x459879 [ 527.659827][T30716] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 527.679421][T30716] RSP: 002b:00007fe71fbdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 527.687827][T30716] RAX: ffffffffffffffda RBX: 00007fe71fbdac90 RCX: 0000000000459879 [ 527.695793][T30716] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 527.703759][T30716] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 527.711728][T30716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe71fbdb6d4 [ 527.719700][T30716] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000005 [ 527.729064][T30729] CPU: 1 PID: 30729 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 527.736957][T30729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.747006][T30729] Call Trace: [ 527.750291][T30729] dump_stack+0x172/0x1f0 [ 527.750312][T30729] should_fail.cold+0xa/0x15 [ 527.750330][T30729] ? fault_create_debugfs_attr+0x180/0x180 [ 527.750343][T30729] ? page_to_nid.part.0+0x20/0x20 [ 527.750364][T30729] ? ___might_sleep+0x163/0x280 [ 527.759263][T30729] __should_failslab+0x121/0x190 [ 527.759281][T30729] should_failslab+0x9/0x14 [ 527.759294][T30729] kmem_cache_alloc+0x2aa/0x710 [ 527.759312][T30729] __alloc_file+0x27/0x340 [ 527.759329][T30729] alloc_empty_file+0x72/0x170 [ 527.774948][T30729] path_openat+0xef/0x4630 03:43:02 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x7000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 527.802712][T30729] ? save_stack+0x23/0x90 [ 527.807038][T30729] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 527.807051][T30729] ? kasan_slab_alloc+0xf/0x20 [ 527.807062][T30729] ? kmem_cache_alloc+0x121/0x710 [ 527.807080][T30729] ? getname_flags+0xd6/0x5b0 [ 527.827281][T30729] ? getname+0x1a/0x20 [ 527.831348][T30729] ? do_sys_open+0x2c9/0x5d0 [ 527.835941][T30729] ? __x64_sys_creat+0x61/0x80 [ 527.840706][T30729] ? retint_kernel+0x2b/0x2b [ 527.845300][T30729] ? trace_hardirqs_on_caller+0x6a/0x240 03:43:02 executing program 5 (fault-call:11 fault-nth:7): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 527.850932][T30729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 527.857187][T30729] ? debug_smp_processor_id+0x3c/0x214 [ 527.862680][T30729] ? perf_trace_lock+0xeb/0x4c0 [ 527.867534][T30729] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 527.872915][T30729] ? __lockdep_free_key_range+0x120/0x120 [ 527.878639][T30729] ? __alloc_fd+0x487/0x620 [ 527.883151][T30729] do_filp_open+0x1a1/0x280 [ 527.887666][T30729] ? may_open_dev+0x100/0x100 [ 527.892328][T30729] ? lock_downgrade+0x920/0x920 [ 527.897158][T30729] ? rwlock_bug.part.0+0x90/0x90 [ 527.902080][T30729] ? __kasan_check_read+0x11/0x20 [ 527.907085][T30729] ? do_raw_spin_unlock+0x57/0x270 [ 527.912188][T30729] do_sys_open+0x3fe/0x5d0 [ 527.916587][T30729] ? filp_open+0x80/0x80 [ 527.920814][T30729] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 527.926859][T30729] ? trace_hardirqs_off_caller+0x65/0x230 [ 527.932590][T30729] __x64_sys_creat+0x61/0x80 [ 527.937162][T30729] do_syscall_64+0xfd/0x6a0 [ 527.941646][T30729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 527.947523][T30729] RIP: 0033:0x459879 [ 527.951399][T30729] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 527.970979][T30729] RSP: 002b:00007fe7a62c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 527.979368][T30729] RAX: ffffffffffffffda RBX: 00007fe7a62c0c90 RCX: 0000000000459879 [ 527.987319][T30729] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 527.995269][T30729] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 528.003220][T30729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7a62c16d4 [ 528.011183][T30729] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000007 03:43:03 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:03 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x600a00, 0x38) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 528.304857][T30757] FAULT_INJECTION: forcing a failure. [ 528.304857][T30757] name failslab, interval 1, probability 0, space 0, times 0 [ 528.330119][T30757] CPU: 1 PID: 30757 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 528.338039][T30757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.338045][T30757] Call Trace: 03:43:03 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0xfffffffffffffc17, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11082, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="73656375726974792e6e9f721e7f76"], &(0x7f0000000280)=""/45, 0x2d) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000340)={{0x3, @addr=0x6}, 0x8, 0x9, 0x8}) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x16, 0xfffffffffffffffb}) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) [ 528.338072][T30757] dump_stack+0x172/0x1f0 [ 528.355709][T30757] should_fail.cold+0xa/0x15 [ 528.360312][T30757] ? fault_create_debugfs_attr+0x180/0x180 [ 528.366136][T30757] ? ___might_sleep+0x163/0x280 [ 528.366158][T30757] __should_failslab+0x121/0x190 [ 528.366173][T30757] should_failslab+0x9/0x14 [ 528.366191][T30757] __kmalloc+0x2e0/0x770 [ 528.384654][T30757] ? tomoyo_encode2.part.0+0x40/0x400 [ 528.390031][T30757] ? tomoyo_encode2.part.0+0xf5/0x400 [ 528.395410][T30757] tomoyo_encode2.part.0+0xf5/0x400 [ 528.400603][T30757] tomoyo_encode+0x2b/0x50 [ 528.405019][T30757] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 528.410663][T30757] tomoyo_path_number_perm+0x1dd/0x520 [ 528.416114][T30757] ? tomoyo_path_number_perm+0x193/0x520 [ 528.421737][T30757] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 528.427535][T30757] ? d_alloc_parallel+0x7de/0x1c30 [ 528.432629][T30757] ? lock_release+0x4c0/0x960 [ 528.437293][T30757] ? __this_cpu_preempt_check+0x3a/0x210 [ 528.444120][T30757] ? retint_kernel+0x2b/0x2b [ 528.448708][T30757] ? __sanitizer_cov_trace_switch+0x13/0x80 [ 528.454601][T30757] tomoyo_path_mknod+0x12d/0x1b0 [ 528.459526][T30757] ? tomoyo_path_chown+0x1c0/0x1c0 [ 528.464631][T30757] security_path_mknod+0x119/0x180 [ 528.469744][T30757] lookup_open+0x86b/0x1a50 [ 528.474249][T30757] ? vfs_link+0xb90/0xb90 [ 528.478566][T30757] path_openat+0x14ac/0x4630 [ 528.483133][T30757] ? save_stack+0x23/0x90 [ 528.487444][T30757] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 528.493227][T30757] ? kasan_slab_alloc+0xf/0x20 [ 528.497975][T30757] ? kmem_cache_alloc+0x121/0x710 [ 528.502977][T30757] ? getname_flags+0xd6/0x5b0 [ 528.507637][T30757] ? getname+0x1a/0x20 [ 528.511691][T30757] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 528.517045][T30757] ? __lockdep_free_key_range+0x120/0x120 [ 528.522753][T30757] ? retint_kernel+0x2b/0x2b [ 528.527330][T30757] ? trace_hardirqs_on_caller+0x6a/0x240 [ 528.532960][T30757] do_filp_open+0x1a1/0x280 [ 528.537461][T30757] ? may_open_dev+0x100/0x100 [ 528.542146][T30757] ? trace_hardirqs_on_caller+0x6a/0x240 [ 528.547771][T30757] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 528.553262][T30757] ? __this_cpu_preempt_check+0x3a/0x210 [ 528.558880][T30757] do_sys_open+0x3fe/0x5d0 [ 528.563277][T30757] ? filp_open+0x80/0x80 [ 528.567501][T30757] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 528.573549][T30757] ? trace_hardirqs_off_caller+0x65/0x230 [ 528.579267][T30757] __x64_sys_creat+0x61/0x80 [ 528.583845][T30757] do_syscall_64+0xfd/0x6a0 [ 528.588338][T30757] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 528.594217][T30757] RIP: 0033:0x459879 [ 528.598090][T30757] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 528.617672][T30757] RSP: 002b:00007fe71fbdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 528.626099][T30757] RAX: ffffffffffffffda RBX: 00007fe71fbdac90 RCX: 0000000000459879 [ 528.634063][T30757] RDX: 0000000000000000 RSI: 5dd8a814d78739d1 RDI: 0000000020000100 [ 528.642015][T30757] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 528.649974][T30757] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe71fbdb6d4 [ 528.657939][T30757] R13: 00000000004bfee4 R14: 00000000004d1de0 R15: 0000000000000005 [ 528.669535][T30757] ERROR: Out of memory at tomoyo_realpath_from_path. 03:43:03 executing program 5 (fault-call:11 fault-nth:8): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 528.770472][T30769] FAT-fs (loop0): bogus number of reserved sectors [ 528.810471][T30769] FAT-fs (loop0): Can't find a valid FAT filesystem 03:43:04 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x8000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:04 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x10) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x200000, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000240)={0x2}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000340)={0x6, "5a0b8a7aa341e0c82cbd8512c049fd526656847dd714f06d85e705b8f94be7d65febe5fad2a5bb194ee269a253ed83f26bcecca4a603e6b24a85c2702e80f3305483bf4028be41c7b0de9f5822b7557a7978e7298d764f6ba87659bfee1cea8d4901f78b13792c85c9902a05626b974456c7e6e9c80049a78c762cbd80167a87"}) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:04 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:04 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = msgget(0x2, 0x4) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) process_vm_writev(r2, &(0x7f0000002a00)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/103, 0x67}, {&(0x7f0000001740)=""/248, 0xf8}, {&(0x7f0000001840)=""/151, 0x97}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/9, 0x9}, {&(0x7f0000002940)=""/75, 0x4b}, {&(0x7f00000029c0)=""/37, 0x25}], 0x8, &(0x7f0000002c80)=[{&(0x7f0000002a80)=""/233, 0xe9}, {&(0x7f0000002b80)=""/126, 0x7e}, {&(0x7f0000002c00)=""/109, 0x6d}], 0x3, 0x0) fchdir(r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x369e5d84) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f00000000c0)=0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000640), &(0x7f0000000680)=0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) io_submit(r5, 0x4, &(0x7f0000000600)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0)="7ec6fe365d340cc0c4b784febae3e9eb614748a0c48bcb23e9dd26b219e9d8d4", 0x20, 0x1ff, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x3ff, r6, &(0x7f0000000340)="a167dba9d80f5e70528c416d5514f49f84d363188f865a16354feafd4ab0d21786d44a98a8f3f02acbaae1756a06708c861f8de60f7dc0d224fd2bbd10a4f9dfbc29be45114130180e154e7d0bcad9fea4f5dcaedebad0ea594af4deb68e86dd935d93034443205e6e2e6d6afdca84db16a149e187c21515098d9208e59c0f41d1c900d8a3ea1800fa66b093cdd942cb7306810f2b3253584e7065b775cc2d237791629c27659488af2725bce447dd", 0xaf, 0xfffffffffffffffa, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f0000000400)="69124b07709ea186fc34af8b1a4df49bbd7898bbdadfb4d951d6096d7611262ef274b7d0c6cc4f426b8ab3c2ef884723521b8b1b4d3bfead0528c29832e9c2894d09", 0x42, 0x7f, 0x0, 0x1, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x401, r8, &(0x7f00000004c0)="a6b1ec81425c1614c3060d4a2895e9a3ba358e24cbce89a6a9d1522aae1c6a7e86cfaf0e53981e19cf4b1f0a1669df94ade914c9641af2958c49ec815244ec22183b5b512ca58227f4899b6a5d6e0a4680a397944735e4633d73e5df88d8c8c73f11ba3183ecdab8882eb4bcbece3d36babf4c911bca39859e4a52c3ab96a044b82f0851a061ec91b11656c015140c046f86e843f21f9efedfce2c9cd4d96176c01aef7e8a48ef80a650051dac7c2767829abab4d94ac839bc5a15c1d46af43f6a03953d07aa82a544697d1d957c8b32da", 0xd1}]) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:04 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @bcast}, [@bcast, @netrom, @remote, @rose, @netrom, @null, @rose, @null]}, &(0x7f0000000280)=0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:04 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xc010000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:04 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r0, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:04 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000340)=""/235, &(0x7f0000000240)=0xeb) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:04 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x95bbbb2b36531c5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000340)="9d9826740120baf540fa351af8e64a43eb5f171667b529780b114ddbcdfdd7dc1d874848a734476a559337cf12e88315421a2ad08d757216f9b280ff97f3c90e7b0a1d4771ffa649f729f8abc6bd3c3cedca610fbc4b3f830371d88d2e16da91491de392d5904baeff69be", 0x6b}], 0x2, &(0x7f0000001640)=[{0x1010, 0x10b, 0xa02, "ee77d5a7ce139a68fc4d5a0ffca8f7359ca3aa7ccb3c1b89aef676c5316aa080c79663ac4418e7c6358985695733e1282839e81366356aa780e61362e3ef6a5e19e7b68ce40dbd4c4ebd563795e066aa20d841b2ec4f5b9d889020caaf8eac9c335e9bf268411c23cec0bfa8d322880c370ed2f381d9c436782d28d49335231550418d4f1c83cac715a83455fbad77fd820efc0f8c4a975c613008db6b09af020763090eaef83627204a0e2d9593f2296b7f5038c8102985958802774b6b5d8a26a2d1a7f3a0642f6579db199f206eed6a6b3ff43efcb1a899c566af05901621ecb26095cf3e16a75b2f682bd7906ff9817d0c145ae3c278ad259ed2012ebe1a48966b72a6b4b2275b65718672ed5cd19bd8323b87b08e570c4557531b999c60dee8530e60083cc63af68acd9429231c43359a921b2186d89fa3c830663b7ace021d3f7735da8a7406a1137aa0d672ca1d80a2f407902ddfee6dadb41eb2850950dac55c74bba04aeabd7e3f2ff41d128a5cb0e75b5bd15d473280abf957dd11552f9a968147b1410853ce2bccfb46b71cd21a894c254fe5d517ab8fa66448edaf79bd58212c7cba3aa986acc1cddf87dd018688002afc19e6be84061871ac71db21d962eeeacef0b3f5e76328736b549f37513f250deec1202ab4ed1b7533448b31c1aa91d72326aab9805befffc53119d2fda4802e562c0e1058e037e8dd4ac77f55e931e22b0b1fe16d092795668e2c301981b4c0df82b4d1d78880246e5b698fa140b791cdd6c80ceba04a459247269c248ffc2b6a4c8385360ed10502b04b5a102bdb380518ae30ee7730d0f963b6635ff7c86e0c4a52966e5c4aba656042f2287008a1f92a2c497daa5c16e821acfa5790998f454e416183afa9d074e4a9ed08f5ff432207e6cc9bd8deda7f064a3d4300cbecef31271bb5b21b375a5f9ed35efe970a719ea32b4f41700d0f69c5f02ca9a87dca054b5b74363a6e6913e578f4eec91c4dcbd9a5675729a17de37fae155a3cb320461edbc97b994c89bc952c876ec2f0d4046a5580b09a9272b55387404ef428348557b294ec659f02cd9423e1ac9db75676771d3dee742a1249ca17b71efa5a67c1932258b974851f8d30fed80c2218f045fc90ea77a9ee12d9c7a884e03c683a679b2fbbf03161667ef98631f4ce12d2c57bebb00e9e41ff832e586e6b0f9eb0b23e4c02efa5efea41fa22d605ac7a9667afc31ce049a68c0039742eaf2196f8066f839c9944f876c70aff09b899d6567f44cc2e17d9ccecb81a43802317851bc1aaaefd011359a9812389b478db5560f5d23a9655888d0277df41c8658fc4e9600b50df6ef3f6165f438b4da06548c7b5c3c99aa32a5781f46f965f4f4a9b7995fd5a5160af06b2d212194496a2edf52999ed079677df03a68eb0b6d39311d5a91b16e42715e380212f10e0627b71e36e2edd5f56b94427dfcf1babe1d699d03c34fb24565f209bed6aa379a608c84b1bb67b86812de0d9bec4823dfe1a11da116fb07d06ecdc339e0a895215b7608fe4201c8babf0f6928051f72bb222243fe1d6d4cce8f77c8bc6028342a04d3ba9d093ac552a840b7d177214a48bc68cfd4b39874c9d05b802f590dab4e540ee6dc1125b24e6ded63f9c632f8f05e30422d9047bda001ddb7c38122b6f5b5c1c9ec9f199252ed20cbd5fe582817ce6e7a0b38c4197e00fedee446a08b2d00789ee16a989fb3c84dc17c3599a1ce630ab960917467943739f3c2ae1788c5e926ca2606299322f3a2e0dfd10551a0f83911e1c444f9f22cdd13ea279ecae4ddd04af78d56b575434244c46125bba88df45762ec9a21399c422580d57c30974fe2465aae29c534df8dc031b9b7ffeb55a290f69f680f71fcdb69c6feb4cf000eeef154566f06117995f9286254ad7463eebe5e697b508f04bf2c427a332a3c86a789bb6fe14c2411209c556ddb9a13cfbb5fc3df3ec65caafa498ae154a21c7a3b6d1f9db24fef58b1791c99d14baf14e7b5608f0ce4b55474454392395235e18b6c99dc5b58979411d5fab9081967ffa0dcfdd16f389cb1ebc4db882bb872df77d4f4f77a921e0869cee27b999b7d367ff8f5e9a45223f34faa322c36253b6bd862adbd5465e53106058576e619ba3e4ae2e4d0f609b4589e3b03086c4cef565e487f157daa427b0d0491ee442523e12c765bbc9b5d94b4a4a8390d160fc20d1a7fb3af864463ef14516c7a3b613541078b9630433fc0254abaf1635df16a1a24f52a957fd166efed05d2a1fa11f8311c499305b4a1776fa1a81c29706ac52b8215a14c4f60cc13572d193424e1479623ab4d0b2236b2161adf62ffa565faa0446d0b3b9796d93aa88625d3053493bd87ec841aa582aebd1bfb59b52ef2a7252dd5f77257b7a3b4cdac5a6304f4746835897a071929d80f6cde3612ed221e4baa3de63896c1d0ed79bd3bfcd27464eb9f4c888d7c346269988917e026e7ef8c2d4c1a2b9be2c011574970752536836badf602e56b0467c2f8d996a83debdf8c082781fe7348e6d52474395b20841b4dd05971432eebab4159f15b426961259c700dd0e45c4f15d27620edd2bee472ccb67b0128072a8b9dd2e70f8403015a6c1b3d81bfc3763363161a8bf6c4fef9933c16c96f8f620e4403d73d717ceeefd88c13c6e9cb39f4b9a4760941d518f8c982f5024b6d88fd0e48d7f29574cc3129dc7e5976c057063fe65c892aff90cb9d314b0c734b0983a4a47f84da92153372bedc42e310b70c44a6445dbe62936685e37c4f62d2d6cc52e100168d9d417b1bf1e0f96b434d3af89bb23c11bd00e1c9ab7e0d14fef36cdb26f4ae90aeeeeea048beea3add5b8d23e2a512f93bd60cd7318ddb270051474466aadbb9c76b181ed847d25e3df2987998e3829ec1a5db706905f8e137100ac29a000c5513a3538312c550ebd54cf415003c7ce4ede697a59565f775468032658cb85d1407ea404b3f5438558dfc5b81a3686df5adcd3f954ef01e77b977dec1ae1912f843a45557dbbb3c4719d1ed1b58a5b5719690c01c4ed7d062375feea961ed732f41972603393694988fc168116fa5523e06aa0d48a572beaca6807c40ead7bfe72c59aae0925bd07c54b1f960ba77218efc9a465fbc41e207949826bdecb26dce1927cee8ab84b88ec39efa13800a443b7ed4e7aec74eec1ba1f55345d80eb1e187b7a13636b6b994abd82e15614cd7b3c532ac669cccc98fcd7c08991f3c5a41ebd2fb2abd38f022dea41604e0b10de0be4bc35d98524eeb780601f547df067fc0dfe185be4f3e9fb317fd748fd60cdec9889ef2df9b52cd1047a68c9e282c93dcdd62b4e1bf918368169199af0d2d724a8b45ee3132499359e5bf545b3a109bd18d4947ccc0fe81c0a04cf345d764437c5ee225a15cfe6b32c513470ca3f82ee2cc3d301a2fcc2cb15d3264da4fb02203c463dc8e3a6eabc30b6f4af87f39553f5106187637327212d9f3825b66ce74e615fce7075bcb6fee62f5fd37f7e89e6ddc62d263833bad319951db23e5f442e711f141ddbdd02617c0ad32eb829fb8f7b00ec42d20b5bc72a82539a26129a1724354e2713329f4ae2f7cc284e62779c8f8b55b32dfbfea46d9b0aeed7cfabcd55268de96fc9bc3099b06f714f74e9b322967b54e91bd9238b30eadb783e0c370b2998cf3cb543d831fe314692e76abbdb838d7a1b9d620289d7b8931b1116869d9a4a442ccd691e4af5af8348ac6f4dd62aa1e3613808795f26f5837edd8d231acfda24db5b23591cb72e6f3423c87f6cfe204fb0238d3a826da23837998d6057a61d2a611a512acf3b2bf2d2763c80c440f9330b69fec982e9d02a35664d7127ef6551884aefbf9f1aba1ab7e6f12193b6dd8923392e531cb7e5ea2fd697f3f3df8b1ba43f572fd2032b3b8a71535ea0d152a8872466ff77fd20ce83db0a65304f8a436dbcd5c4ceee910115248560b2d33e74e51bf7ea697903739a67514041f4871ad14d744727d87ad615b3b13e4a44b04635f8b6f51f3ae87015932cd7019d83f043aad5f878bf8d6ac6965688b21f8c043ad6ff005a135446140d23bee6a1ed5a46b4993ac21369ac58bf2fd4b650461dd42efa545fab44bb9327b7530a0c0326074ff089da7f7a7274e5d99a21322bbe18c45654d9f3ff2ccf011061085c2c1a04dcf492b4eb3684ba00d65b3783f538237950d294e8d51cc5aa9be53423240c57a59f9d25772e84cb3f246546bb6b32617167f9c36e4e1791fc1db710b611f25909ec5aa45027af29b2c5c4b7c6e02d17660a6c02f951d0378c918fa4de99354e71e097b56cada8c2192fff7692d7eeb694de03630714486efd72e6bf8043b4309b19de1ac94d82f2244d2f076e1bbf4d8c218ddc448bb83559e1225d5e628b2338593300f369a09a1023a8d7eddf55fb9e71007bcc5ab47d61ad7bbd0047a036da20e2f8273ca3a88baab34a3b551b56455807d6cd01407c048d85fa443ab5e7915e9404cf1c94307ddadae98660ed42e1737cb9c45bf2b1801de5c4ba0267745b9d88530a3a92143abdebe496d648b867df7d696d7e5295d18774f581c821058d989bc8446b1ec934f8720fd60685455f1efec31bfbad6159623e3521e0468e84cb83b0f2de833b597c8ab63105c115e7436fc746885e49b7131c6ad4f142476891d9a72eeb2447740c56d09e11a59e4d3a62808697e30e108a56efdce35f38a5537d1d1d22cb2e5f1f069d9d0a67ed5eef3695ffb37c598918400e9289bffea4bbf3910880162a89b782f4b006e9b08a37d13020c2ed7ca47553f762314c11d16240ee0dce6fd802c1604ffc742cbb2ec48a5cfb9bd70afacceba8d1552669ca8c7fe050a316f42d43d7c9ab8a6fae9e877ecfec3f31275c54dc776c76a39718d9eb3c472f22890808cf0451be3d3d745cf79ba8514ea037f9a38dd1f11dfc52a1a291d21ad711c5a53ec43b9f9c5000e1f7460dfffe458188027e13fd0ed536e8f97e3e8d6f923bf3847160dff90be4d8a476b01fae854bba85e6e24c0a9e0a79f85afecb435f20124aa0600d15bb983b26c17d4bb0cee2594179f4aa694a3dea60daaf0a63223275d1125a0e44d19f9f17eb6c35b3c84c172fbcaf8f6470dab89386bcafdd2f1e4dcf07efbfa0260910beece2d9b7a2bb185c608ee6555a9121ed3edec98406aba4ece5ce50e8e1efd4c64803553c6c4ae981e192b1a5c8d40cdf53a97d8dfb5829d359c391a2b38a5869c46b09d870d650a1362b37aea708d18772388dda424b042bc956c27242091855b896fbad833683c6cf4bf1f5175e56541fd84bfada4aeb44dfe2ed48625559776f921396dc9f4a9f82fef1862daf95e6c762a1307c205b7288df0040ef48b2a2bdd9313ef0af20b73f73c85354a86d2cafb14233e942379f1cbc2a04717d87e366d9506014e79508cc688113a25433036a2d9b14e5c6546818807af0c9693cae7bd55c6cbc8471abf2f3a19cc89c23500acaf0710c44d6cd61c270a44bb44980da0f1bf995423bb8a3f9310709b8e2b8edd806202baf12e9fa723384a295f3a274d5c1d894910293c8c92e898d356df2e46acf849c8c51871eebfa9f04b70ba1de0726d61713983865e3838f476e7ee97144823361285845513d15e739dfd901a83426097eb89efc8efba3d343a44907628605d3b04597d2c34478ad24dce8b34fbaaf56f4a635931534095613eed539c713a907c41f76144a0d6ea024b42d64d20794c98cd0fcd3dfff829858c934eee9edfbba46f87f"}, {0x10, 0x115, 0xfffffffffffffffa}, {0x30, 0xc, 0x3ff, "b680b06125ba2559446b04d214844b7a116a2ce0956ec9d37c"}, {0x20, 0xfed134b2983aed7c, 0x10000, "e30cd2ecac81a14099"}], 0x1070}, 0x800) 03:43:04 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) r3 = add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') r5 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='@vboxnet0system\x00', r4) r6 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="37f1d7bb9a72dab4a45c01d5611a746c1d5519f42c1993f5f0e8d6a1fb18d8a2d5e28de9b0d115cc357ba837f1f189b4105f5ac78913356f24c68f133562b1a7acf5c033d34eb695c7759d7886155e65c8f0ed0667f2225ef2ea71df24aa5c008025e2bad5bcace19f0da21356a23a468ad6d06c30f148c1cb930e2f5273ee239c0682f7679ecf3d508b3027baf225a06f32fb7b3168216f8e4b7ac4771bef59d4b69874158835689dccc2d451c505a778dda69c42dc694b322fa587a981", 0xbe, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r6) keyctl$dh_compute(0x17, &(0x7f0000000280)={r5, r3, r6}, &(0x7f0000000340)=""/116, 0x74, &(0x7f0000000500)={&(0x7f00000003c0)={'sha3-512-generic\x00'}, &(0x7f0000000400)="bd557452f243d05950d8dfb48a3da78ee05478fb753c2476124c7548d1968ee28c5395bd2c65f1cc8100bc8cf5efae530fd8526256fb75330b2e205dd7d2c9e066ccc3fd8a0b554a9aca054b340ecc625bb2a04f1a23a2d5c6104319680b4298a0d61bb654678009f0e85cd62afb69a4b39fcf9d6ffe73e1b9b3da82ddf8f3c0379d27d33b8bba21c8ec5d20a3e93d0c77a155415df82908cb6aecccbf1a9b5799a132b6f89bf6de373aa1cffd72161df661727dc034a53ea47cd6f186fa0c1b30be4c", 0xc3}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 529.851969][ T26] audit: type=1804 audit(1567741384.964:210): pid=30879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/405/file0/file0" dev="loop2" ino=1070 res=1 03:43:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000c80)=[{&(0x7f0000000240)={0x27, 0x0, 0x2, 0x7, 0x7, 0x20, "8d47aac4b3e43d0d3b78dd9b904ed962da8a2db3d18ba238a240ede6ac9fb4cc0ff1ac6823a15a2080dc6cd93183dbacc3d828d7e11ce9ff41a644dadd80c1", 0xe}, 0x60, &(0x7f0000000400)=[{&(0x7f00000001c0)="1ec1fe85bf7062a5e93db7dadad49b11a9e7009b6856bdf2d169153d", 0x1c}, {&(0x7f0000000340)="3a3a0220a6dba3f96619fb1afdd409464bdad26788", 0x15}, {&(0x7f0000000380)="19e4470fc7a904ff65282590bf29c28711b6b2c1baf18662e25b55cf0dec944f7d79ace5785b60623b07fe0288ce44fee7197fdd4c202fbe94eeec532cccfcfd1ebb39d690827622043835fc", 0x4c}], 0x3, &(0x7f0000000440)={0xf8, 0x101, 0x0, "8d2d08ba563ba54b8d729700e8e48f752a84f228f66d2501056bd222d922190b3ce0b6408e0487b326fb20d3e2604241e508b810a8bb2c3d04c6dbc801d46f1d86b84c3f394042814fef529b7bafa44c04bbbf283a8502a362c04495137b4ebe855092b535bd499b3591bf260e9d07e07fac1155c9e38328c1dd8e6e6ba2e844fbe844c10de952fb9f551d52a17bc6c6829603405ff08373b162c11ad1ea79ecea305fec063f1b84cf7cd2f78c05981e247c76e11836bdc4cdd74fedea9f2f8cd1b1b2ff13b4e97162c72e22baa324551d9f2b1c99ecdea4c01bad2f6a94664ada7834"}, 0xf8, 0x80}, {&(0x7f0000000540)={0x27, 0x0, 0x1, 0x2, 0x7, 0xb581, "1f007848f30f5294b30a9db7c324be190bb3c06e8d53eb5c64f869b866f5b44071fa038d11f3d4364304669f41ab02e643a679c5ebf84409290d7903936ebe", 0x22}, 0x60, &(0x7f0000000700)=[{&(0x7f00000005c0)="bf4c5bbdaca47729a3d3d65f108b7bed83aba121967a56855715e3dc12ac1ea410bfcb0661805a7fa38ff4a584e0daed60e3118e47dca61b9baae37f83d44ac2a79b981605cc2af756f4e268ac72214bd04f519cec9652bce29bad57521d6d0c0cb0de67f266eb66d139324a73fca53d36ea47eb89217603d2264a", 0x7b}, {&(0x7f0000000640)="93b038bf83168f5b9f7f09fc8f3e35fe04a0c684f0a9d0752a30eb518baaa185dd98db792bd833c9d2a618e552cb16bd9371dffb13f67d9159691249d4dff00695f7f09fcbf81a9b96e0bb69ce56f2ade98318894c13a137c6f12c1ccfef8ef35b678138fd64dccebf4e4623bdd087c2229730339b3fc9be1f1936fc3b0dfd7c3e25e79fb5283174e71c45bc8529e86e5f5ad2fbf2a64a1e3b781188634c89957ea4e3f1d0a326024c78", 0xaa}], 0x2, &(0x7f0000000740)={0xa0, 0x119, 0xfffffffffffffff8, "8d98ea951c104e930db76f1d701a01063c218afbe7de1966f41fc57306982f6d683249865551f4feaddae8d05dea6cdda3b02342caf9799d832512756e4113c91f0dfb06196d6fad67b0e56e750e8fea34ee54be21127eb6e579f22084c255c0cc0245ffb608635b33374502d5ca7894d1e5ca9e1b94afa7b09bca331d7d71ef9234748a16b8d7c354e1"}, 0xa0, 0x20000000}, {&(0x7f0000000800)={0x27, 0x0, 0x0, 0x1, 0x7, 0x4ff, "0628f9ef6005ac3c68e9d097cbeda1909119f653da9749512209bfe91688187d65adb42e59a99a0c50755f6539ccd8bd9c78fd12961fb0bf56d2fce79fdc4e", 0x34}, 0x60, &(0x7f0000000980)=[{&(0x7f0000000880)="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", 0xfc}], 0x1, &(0x7f00000009c0)={0x30, 0x116, 0x10000, "5aafc253a3e64372c340f5c547f428fd9ab38908848b39172e5bf9937dd882b2"}, 0x30, 0x8}, {&(0x7f0000000a00)={0x27, 0x1, 0x2, 0x6, 0x9, 0x100000001, "ef7c5b79d62a8cffb79c2665cb739f9d538c8fa18bee663bc304c3a0bcaa53fbce85bef27ecf709f0c6aa650d67f325bd7fa2b9e28e64652a2d596c077ca1c", 0x24}, 0x60, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="a58cdb4478310f7b90d684cc41afa9a920c6287b2d8bf9f99a1112670e71fe10ed8257777e5d9025bd32559370096c9e44f0a51060fff684713e1e", 0x3b}, {&(0x7f0000000ac0)="e911d94220325b869692988d0faa3e946abcf2e0cd811ea81bd7a86842de35ada5ff5bca8f585802505fae3c95ee507d7ecc7ba4bf9cd059716afd45702507eb2b3d737d0f6064d186df3d470394e304ac114475509f47d85e403207dc5b3f5e0cb80d1269385b4a4f42b5141ffc7abd467cf63ece274a3fdecd21ea838d4aae35e70ad302192fc8b0e64659ee9573f170bab719b3c789de51ee9f7dca15bd2cccadb4c1038705aca28566954a235a2e7d2a2d3f9a3c29ed442daf20c69fceb5a7d5079474b2c735070808092d8dcff2190d0347f5ee0a6cd51ce96eee2c828d", 0xe0}], 0x2, &(0x7f0000000c00)={0x68, 0x86, 0x2, "dbe0d48544e7463fa8f85184a9886ab75cb724a0d32ef602d476ecbba18ee073007ddda78723c81c66fdf75f11ec38cfc26f5f7e6e4629ee6fc8fdf8fdf7cda907d210f42c1c7b7b83fe39494327b87b6c9c"}, 0x68, 0xd24ef66f8ee981bc}], 0x4, 0x40c8) 03:43:05 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:05 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000240)) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)=0x3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:05 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00'}, &(0x7f00000001c0)=0x54) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:05 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@dev}}, 0xe8) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0xffff, 0x8302) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fstat(r6, &(0x7f0000000240)) 03:43:05 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x28001, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x5dd8a814d78738f7) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 530.504729][ T26] audit: type=1804 audit(1567741385.604:211): pid=30928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/461/file1" dev="sda1" ino=16603 res=1 03:43:05 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x33000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:05 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x101000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000440)="91ff12721e367ca9a738720d85dda1d135972d648a15678252e84519e9bb36d43180780fcb67b5d50eec85938893a0261f72ba8582d26ed6513be98053184d5f08e7d54817fca256b74b9f95bbc6c8c2682212a2933849fdade469c79bed0888788de29ef221518263b8e7dc2f443d2e804a7e22d8ed62d6a5698eb871a44b125e8a159b4e11cf01868ba63696ab7755f24f1f565f87381e4e", &(0x7f0000000500)="1c95de794cb47938de833d94345809cec7964fb862a10c666969928964d1f7dfd691a3fc732db9f02570c5b26527fd88a7a708f444137b1c0c618fb2bbea9cb905df2c74bf76df2b86a054737a3ad96d416327f2ea21c14243fe73a2b4ad9c478e92f6c450acab02a4fbb4f927e1b2f10a524178ad6d3bab68a2a1f45e1762f4e7019700f680b81513a77f00bd3776bae4294aadb5219be492950584817036a464f9a5c0ac581bcc819489dc7dd1877582788e580edd96a7fb836b29bc25d5c12b11fe2cb0beeb3ec45b43e58d04aa870cd844087fc85eac99a9d108f5b3024548d7814f3f3ca09c", 0x4}, 0x20) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000340)="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") r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000640)="c41834481d46beebbe06630f46e893b08b961d65b3e26211ab8a4087fd37662bde23506a153ef0e885293bc1f6411bf2795864af55048e8c537dc71a64c839097f2f84258bff3404cdd80a7e548caf311edf723d6e88da22ec77ebec63b01ed7ca893a93b54618a0d9bdecf645eac976c4d884f45787dde605a6035c86ed53de1d6cd782f9445a0ea4167b2ddbac4b103a6a9cedd14560b75b6cdde7aa656cafe428c93ccac614c81b45ed5dc3d04fa1aa328dda4f3c9419113357385475382cb2d4bcc6121f572150b4dd782c1262", 0xcf}, {&(0x7f0000000740)="9fcce334c4de2275532cdd96ced31e934242ad7689f7d72a134e7fdff47b478bd8e9fea1c1f9c2236f243740f83ca2f31be79e20d551ab2a122f1080c7f2647fdffc0a8569d08e523ead0df3ccfc77268326ee2c6f45b09dac9109", 0x5b}], 0x2, 0xd) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000002c0)) fcntl$lock(r4, 0x25, &(0x7f0000000800)={0x2, 0x5, 0x7fff, 0x7fff, r5}) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 530.774026][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 530.785888][ T26] audit: type=1804 audit(1567741385.834:212): pid=30927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir864581932/syzkaller.lRPhbG/680/file0/file0" dev="sda1" ino=16607 res=1 03:43:05 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = getgid() fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000200000000000200ae7c", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="4201001ec9d04e7599f6c4b21de66e6a3a218e739a9ec56906ccafc52c6e6ba2db92fca395d7e2786f5c46c6e9eaaa0f2df67375280b37b0abd4fbd9e8bca436ab3dac41d7f134e0f3f8648145d8a4f5baabc2ce8ad365d423d26ce2503cb0249b4843de53223502", @ANYRES32=0xee01, @ANYBLOB="040003000000000008000100", @ANYRES32=r5, @ANYBLOB="10000100000000002000000000000000"], 0x44, 0x1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 530.852354][T11958] FAT-fs (loop2): Filesystem has been set read-only 03:43:06 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x50c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:06 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file1\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="eb001000000032778f0000002612d024b0ebe23a471d1f4d65852e66620400f0fa00000f010270fff82774fb21ffbe5e16d18311", 0x34}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000200)={0x1, 0x577, 0x3, 0x4, 0x8f}) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:06 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) r5 = syz_open_procfs(r4, &(0x7f0000000240)='comm\x00') ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r6 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r6) keyctl$link(0x8, 0x0, 0x0) fremovexattr(r3, &(0x7f00000001c0)=@known='system.sockprotoname\x00') recvmsg(r2, &(0x7f00000005c0)={&(0x7f00000003c0)=@ax25={{0x3, @rose}, [@default, @netrom, @null, @bcast, @null, @remote, @netrom, @netrom]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000580)=""/10, 0xa}], 0x5, &(0x7f0000000780)=""/237, 0xed}, 0x2100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)={0x2c9b, 0x3, 0x0, {0x0, 0x989680}, 0x7fffffff, 0x6}) r7 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f0000000280)=0xe3f) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, &(0x7f0000000880)=0x9) 03:43:06 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x40000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000540)={0x47, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="0368d8b5a89b3286db80a5c7c8cd5a750000006ee7689c21a64e340f2e977fac1da32a009400000000000000002500000000000000000000a1ff000901c3d9002346eaeb1ba2c06f2664e2d03acd33b869c3053f2043df2c670ee560f0f231c0905d21d7f9700b0ff47c9cf2f2e8864329c12e2da3907c9674bf407c2f2f82ed51225690b57b733635e770fe009823aa63b33c8ba3ded63465a063b9b4af9a59307e6956e461cdc0662834883f819a8448eeb0d80f2972703225ba55bf39d1e03abd0a52364c66def8aa5ca6566d04663a876ce7255d2f884726d7e3cd5730616688"], &(0x7f0000000280)=0x24) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r2, 0x1) fchdir(r0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x40}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x1f576bf25c1bd4cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x98040, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x967, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 531.532305][T30981] FAT-fs (loop3): invalid media value (0x1d) 03:43:06 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000240)=0x9) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) sysfs$3(0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1f) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 531.612921][T30981] FAT-fs (loop3): Can't find a valid FAT filesystem 03:43:06 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x8001, 0x40) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000200)={0x0, 0x7, 0x5, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x9}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000240)) 03:43:07 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x80040000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 532.154280][ T26] audit: type=1804 audit(1567741387.264:213): pid=30988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/497/file0/file0" dev="loop0" ino=1073 res=1 03:43:07 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000001c0)={0x2, r3}) socket(0x0, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:07 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:07 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x20) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 532.221323][ T26] audit: type=1804 audit(1567741387.264:214): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/497/file0/file0" dev="loop0" ino=1073 res=1 03:43:07 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfeffffff) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:07 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x800, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_rxfh={0xfff215ad3a7ab8ee, 0x9, 0x8, 0x8000, 0x3, "931d2d", 0xffffffffffffff86, [0x0, 0xffff, 0x7, 0x2e, 0x10001, 0xfff, 0x91, 0x8000, 0x4]}}) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:07 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, [0xf6, 0x9, 0x5, 0x8, 0x1ff, 0x2, 0x2, 0x9, 0x9, 0xf9ac, 0x2000400000, 0x5, 0x6e, 0x3, 0x4]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x1ff, 0x7f, 0x8000000000000000, 0x3, 0x19291d065b384109}, 0x98) r5 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000001c0)) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r5) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 532.567692][ T26] audit: type=1804 audit(1567741387.644:215): pid=31004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir054760431/syzkaller.fTh9zM/468/file0/file0" dev="loop1" ino=1076 res=1 [ 532.988065][ T26] audit: type=1804 audit(1567741388.094:216): pid=31078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/463/file0/file0" dev="loop4" ino=1078 res=1 [ 533.045097][ T26] audit: type=1804 audit(1567741388.134:217): pid=31036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/463/file0/file0" dev="loop4" ino=1078 res=1 03:43:08 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000240)={{0x36f, 0x9}, {0x0, 0x5}, 0xfffffffffffffffd, 0x4, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000001c0)={0x1ff, 0x28, [0x3, 0x5, 0x712, 0x2, 0x0, 0x6, 0x7, 0x2, 0x4, 0x2]}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:08 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x156) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:08 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x4000, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_elf64(r3, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x100, 0x2, 0x1, 0x1000, 0x3, 0x3e, 0x1, 0x12f, 0x40, 0x335, 0x8, 0x9, 0x38, 0x1, 0x4, 0x8, 0x5}, [{0x5, 0x7fffffff, 0xfff, 0xa307, 0x40, 0x4, 0xc937, 0x7}], "c6372d8f70c0303076eecd1ddb60325f28fe2fd20be95ab51730f6c90be7915c1a807f6826d01771cf040b83a64913125d4b274f454f4f8f4b83d10b550071d2a55683ab06208ee237ac24", [[], [], [], [], [], [], [], []]}, 0x8c3) socket(0x0, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x0, 0x1b, 0x7, 0x6, 0x8, 0x9}) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:08 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1b00000011005f0014f9f407faac47000200000001000000000008", 0x1b) r2 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 533.294739][T31059] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 533.368004][T10320] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 533.403232][T31059] FAT-fs (loop0): Filesystem has been set read-only [ 533.433552][T10320] FAT-fs (loop1): Filesystem has been set read-only [ 533.470305][ T26] audit: type=1804 audit(1567741388.584:218): pid=31075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/498/file0/file0" dev="loop0" ino=1081 res=1 [ 533.472384][T31108] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 533.524590][ T26] audit: type=1804 audit(1567741388.584:219): pid=31108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/498/file0/file0" dev="loop0" ino=1081 res=1 [ 533.568507][ T26] audit: type=1804 audit(1567741388.674:220): pid=31086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/409/file0/file0" dev="loop2" ino=1083 res=1 03:43:08 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x1) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 533.732423][T31086] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 533.785661][T31086] FAT-fs (loop2): Filesystem has been set read-only 03:43:09 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x2000, 0x1800, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000a00000/0x600000)=nil, 0x1e76b3f7e83c4d66) shmctl$SHM_UNLOCK(r2, 0xc) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:09 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xff000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:09 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0xffff, 0x201, 0x100, 0x8, 0x23, 0x5, 0x7, r6}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000340)={r7, 0xb9, "367cacc2a2c1442a685e6f2c709c70d4c5f0028c68e2e2e30983d6a52ebd920828030a546e08f40f57fa45d80933e16f6dd2059e3c1b24d9c0208ce300d6e85fef361ea345c146bb6f5b8613db80423c8f99bed82a4b3d09dce5418aca972d20bf20414e37fc3b75495f0d59ae692d7cfe8624c7146430152584f9ad72ab6dca946c10e7e7c2588b8f92ce7111eea884eff50bb6315469f765519680c829c0971767a575a1614c135ebfb47a763e3045b9abfb70fdd0a3e32f"}, &(0x7f0000000280)=0xc1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) socket$inet6_sctp(0xa, 0x5, 0x84) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 534.036719][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 03:43:09 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x6, 0x41000) write$FUSE_DIRENT(r1, &(0x7f0000000200)={0x98, 0x0, 0x8, [{0x5, 0x7, 0x9, 0x1, 'vmnet1GPL'}, {0x4, 0x9, 0x1, 0x0, '+'}, {0x2, 0x4c, 0x8, 0x1ff, 'cgroup2\x00'}, {0x5, 0x9, 0x5, 0x9dfd, 'user\x00'}]}, 0x98) r2 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:09 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$selinux_access(r2, &(0x7f0000000240)={'system_u:object_r:gpg_exec_t:s0', 0x20, '/usr/sbin/ntpd'}, 0x44) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 534.465996][ T26] audit: type=1804 audit(1567741389.574:221): pid=31160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/464/file0/file0" dev="loop4" ino=1085 res=1 03:43:09 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfffffffe) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="eb733574376b66732e666174f00114010002000270ff", 0x16}], 0x2000000, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x80, @remote, 0x41}}, 0x4, 0x9, 0x5, 0x0, 0x7543abaeda074b9e}, 0x98) fchdir(r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x6}, 0x28, 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000340)={0x3, "7392a2a463b225c8c3ad2e493e52b672f5ef686604affe56325919f2c2ee7a29", 0x2, 0xfe, 0x0, 0xefffff, 0x2}) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 534.702639][ T26] audit: type=1804 audit(1567741389.614:222): pid=31163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/464/file0/file0" dev="loop4" ino=1085 res=1 [ 534.917189][T31213] FAT-fs (loop4): bogus number of reserved sectors [ 534.977086][T31213] FAT-fs (loop4): Can't find a valid FAT filesystem 03:43:10 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x1000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:10 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "ed46f5cada"}, 0x9) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:10 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffff7) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:10 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0xf5, 0x2, 0x8d9b, "957810f659dae18baa18bc980b6c54ea", "9f4fc963fb50c69e7629072a3e74edab36a242d598c2c36088e35cd6ff9dbf0ce1f2c67f740d021275c40bf0ddcb8a015d33af61b4a60a960bc7e84929a50a7f4bdcf0f21eedeccc3dcafaee6dc746302ce712d34dd902afa92e5b3c556087b631da62955a8fe2d1f2a548dfa73f488f5672f4d4de23205345111ec823b22b8adc4420060f0f18b91eb24320350b07f40cda0f5f4708086c0eeebdf56f34f332fee144439d537c92b7b4e727739c0aa9629a9f5e4cb42e285fabcc9f44cf2f5892ccc76c9833c938e19a50ca350e9b5f3d8fd9e15567bdf330354be71be7e30c"}, 0xf5, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:10 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:10 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x100000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:10 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x7, 0x2, @tid=r2}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000001c0)=0x400) 03:43:11 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x454d96d0f9100a54) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fallocate(r2, 0x1, 0x0, 0x369e5d84) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0x9, 0x2, 0xffffffffffffff80, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101000) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000280)) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:11 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x200000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:11 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$P9_RREADDIR(r2, &(0x7f0000000340)={0x103, 0x29, 0x1, {0x2, [{{0x8d098e24fd1ab00, 0x0, 0x6}, 0x5, 0x1, 0x7, './file1'}, {{0x8, 0x0, 0x4}, 0x5, 0x8, 0x7, './file1'}, {{0xe0, 0x1, 0x3}, 0xf03, 0x6, 0x7, './file1'}, {{0x2, 0x1, 0x2}, 0x8000, 0x4, 0x7, './file1'}, {{0x10, 0x0, 0x1}, 0x9, 0x7, 0x7, './file1'}, {{0x20}, 0x9, 0x6, 0x7, './file1'}, {{0x0, 0x0, 0x5}, 0x3, 0x7, 0x7, './file0'}, {{0x82, 0x4, 0x6}, 0x2, 0x3fb4, 0x7, './file2'}]}}, 0x103) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:11 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) prctl$PR_CAPBSET_DROP(0x18, 0xa) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x3, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:11 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) sendmmsg(r2, &(0x7f0000006440)=[{{&(0x7f0000000240)=@rc={0x1f, {0x9974, 0x6, 0x8001, 0x4, 0x6, 0x9672}, 0xfffffffffffffffe}, 0x80, &(0x7f0000001640)}}, {{&(0x7f00000016c0)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001740)="a19181cf47290ad42dfcfb76467ae987cb695efdde2ea080029a55de44eab8dd4eacf8fbf0cb602ec3b4619d56a75ed0b7934117e204144b7c0a95144bdfe399e4016e2d2ecce7e19f1b546bb9179f7d8f30e5340360ddab5817a4ce20d8afd1d1368cbabd3c8755bfe6bd2ff1d17f82bc8db17c6680863c2c8f22aef53ebcde9530e660db6df2240b2b9da9c7742ffae26687ad265e4d2c", 0x98}, {&(0x7f0000001800)="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", 0x1000}], 0x2, &(0x7f0000002800)=[{0x30, 0x115, 0x8, "e87c67d01d138980a34bf9388b6d2ad9dfcfb2a5bf5bf3b4e438"}, {0x1010, 0x110, 0x6, "66f9b8d5e9d4d52c3c0c71202cf7dcde35e4530961945ddeb88eb4f870de458da51fc2ce8d1976211a53eedd5774131837502104b262d38437fd7152bc02bca73bc02e8e3ee15c74bdee0e3a1f394f5655d2651706d314d81ab7e921ed5c28bca209b33f6fbd651b7300d050c5442c293e135e2c756f63601f06b6a3ff804329f89c1bde995da7501de7ba973c6d8f5453805dab192413f13fe8fa7e010f46915c1c7fa8fdbbf1ccea0d90f9322b263c22c1e06c6a9dda676934e9ea20bef656c06c8ae88e85fd7f4093aa7321286cea3df6fb64a9e5d2af646372892ea95d54ff767a5d466334a73c03aedd20cdc8fa955b8e81a149b49d2bfcbabd51db3e355cc7d1a498073752c5109c2fde2de21c1cae9bb67491bd8e69715f9f3eaf5a28da8f826a85536e519b70a06605c2c0cd299220af8b0596afe624e0f326356d0e71a40146001084be6cc6d8d1980322f5dcf6f0d2e7a65bddb61be6ba3bed3258f24316ef5b635eaf851e23bcd7701715ee0c95c4ff5909aa1e4f680c79ef1f9d4f8398e1b963f37850dbddb113334cb9dfd169a5f1cba50b33f385cfc477922d5bc5e864818c31d9b3c5735cac819f44e24b3808842581e5edd813ce5bd0c02e28bc1228f773a20a6ab9781ee20ef51d93165905e223200fa88325dc1473f7422a945f97a8de29099e56396106088f1d04e01a75499e8836582f7c15081a522fcdad80c616f30345be22387ea7fbc7d45cb5e8437bb4bc744baf37c8c7ab943ebfffa74bd8493bb748686852e48ccffc3afdfe6ed6bace329a378b88e36d93dee1b213c4fb853d211c11fdbfc2d9db2d696558e57ed95cb9f01cb1ef6a2ad489ef94cbd9a6bcd298ea273b13b117cc673d464d7784b841163e3a16939a1dfdbc34b1da23de767b23fe0c2dc0818c0756ee70874b448ce82a75c12d9ab3cfdb87790e5fa7874d3f62fa422ea50913cde7ffc0ddef3896654b919ce661b9d53d424e958aa8c5e940f5e6bd29d81287f9ff4286e987975bd4c211215c779f2638eebaaef5f3628a743df7621a6249a3c74ac3883f79bbbbd068f199d43a704d9aeb39848918313b6a7344e929af412f5674f0ad19ea63f15a6d79a70d583d9d528741e79e76c97933fd08f62258f13395d235ba645030abf8a01bbaf197fb42e0cf73b45a45d20a610a354914ac56ab6828396f34b40daf22691ed6ce4e9a000e37f43a09f0edb52c21c98d4b8f1d4d47f0378a4b3f6b634a3c0a49c67ac30c40a6f7bfb0d2cbf309dd87dea11c565bea264e5560662974256147deff54f6ee9a79fbefb6885bc94a55f14d92c69ed6c5b77d6ae0464de32bf57ee0fc69933b6cbf2b15b038529645eb69b458bed2d0eb2b4ee35a8901ce945e444fcaa2c832254982db68a2eb8ad3249eeed26fabebdf17bf2354e6be0795a7317d32dfd9dcd02210abecc105ec95832d65f581bc10927c36728c0d3db220584c58b7847f025e7f3102d6115e06fbc526f1c6ef6733bbe59e9aec819ae989db802ed236cce976c06695520c2f59b597f6551bf89f8b5fe5af8e2aa3e35a41ba3ab25f1cc6a8da35d5b9364aa711f4e08c5655754a62d46beddd7e85a4aa2a78d00056123ab28b06f0dfd52489a71b92a4729bab0692087aa3f62e868c9925a4141367848ae939ccd961195cec67964273459ec22dd11c04df53d53562b7823b71a23cfdf0725fb44c48448703207c151db9f4ae815fa3a905788d35f194ac84258047f3dbcf8c1fdc280738007cf2926b72104c2ecf8813b90a26ac2fd3b548e6cc88863f867259261fcbdc34fe6a8fea5f223cf3a6c3cfe3ed9b24576b38262014c7ae56f952e012c11a51f77ea707167530ca0b7901a0051a8a6d6c33c90ce683696515a0217594938d4f0b0f27803e9b901cda93343948a50e0dc8ffc1a730cb908c463a77996938a65bdf4ece85a46462a14c1d1ccbe3eea49a3c027e6e8899af93139ce915528b5448ffd8a7336ef3594746d084c1c1542f06cf8147374d960a97ede7627c2ffd3b0091eea45bee29bfbd2ff212733c0d15270b0ed0b418429339c23c09113fe844c2eb8ed94bc9bd31594a3763973e9788afea4e5d865fe434b7bac2069a69b64a5828fb723462c79d9e4ec6f6da753d8f30ad25de3a706bc7063bc9498303709282757a28a6957992265c043eefc3066519bf5ff4e870e6c9b6775f66efe59426edba9d56a2da79d3997e4225a0c46c4b1c208bddec56e117f9fc30c2847b6dbd75f83f5867fbb9f31550f5b8e199e9794c56a0b659fd717a69f9aab644e5346714fa5e83ef0c264c4c9cd8b6ae0bf546e40d00a61add5be8e1a3aa9c4dcdb90003a138c7a55f4f8917c6cf8188b03f0dee3288b3286141292531bd90ea5713615e5f85193d8c698faa224dcc120a59a11f5ad3a9de0e4d4685650a28e72c7258bd3800ef5d0b6eb8de9b97a7f7eebd6ee96c1607aa4b1fd06c0cd63e537614bc125606e002f9fb903a4ac33ca990973dd6f14e9f8647c94b28888793cf3c8f9a7b974367527f0e2ef4d857cd28d7d9a6f43af7b59a48d2768298bcb88a38078d69393c7511a264954b151b086c6772c9178267217c22226caf690b6202c9cba54b99121d495f662d46c884447c8ea21aec48ad883e33833f329cc24ede0064c5ae4ac030a1b920ad6d10bc7a99328158bf7f3285a403d4d5a345eeb9c86f26473d62b507bc8f0e25f45aa44aa26857276c366a45ae29c9b49eb7e745161c3e8f18fd5908f1c3f25e03b865f7d89065202a5e212c4a091cf5d5e499e7354bb0b5816d28584d4370ee92a382d50bd6d10c94bfb76e78f6ba01cb7a85acfa8342056dc11449759da567173c9098ffa8a61a8c939e3d2e9803927e21ad3f6ca7cc97cfc596a98eb006877b1a9afacfdd52b6a58a68f780941347f031e1680d111c9b928313437e577a2cc1bafc54f722c1b778b797c2d4f6d61c4f0e1cb57222b1cbf112f49b8443c0c1ba755fe6d74058fb5271774d8eb5266d680f120848ed21258f6771541db8c5aa9c37dab212e5667d850d3ea9a08782d625cd76ab602e586f135cd6d4601dd66e54e56b8f7d35ba4268c840a15d9da70721251d29c61025cd20ab8fd240671dde05946fc9deff968ae5b9b4b306623d5c57ae6faadd0df8791b88e1113970556992ae9a47f22b9194c381134336a92b51913c3fd0a3c5d6d4adcc875dcec77fd2c89bfc0d5d3a903138f5753cabb7c6ca98d4cd7bef130a057a11addcca9728adb4cbedbf4ac649ebf2a26f74b8dbf68cec8543812742350fefa67ac502ef4cf1e387d9d856ca800608a88bbd8f9e28e63898f94fcb0bded30e7f9899bccf861066134ac545096088bd3fb27be34e8fe84942092e2266dad49396d9cacc9ce31b45bfdd3be02194165f871d0c9cf02f484359ef65eb1a72cfb7c182504b051cceec40d6e213d3f770f17a7e52f7828a85d75f476d5848da05db7ae68900c4caedd0a6699ab8692a1216cd33ce06c3a74f7ac7e24ec943c444d5a6e9556c260fab6d142909dc5e65b7f94d0d86140e46f8ae816762b61972cef77888d0d244ce1fac3686e238fbed430b18113586977c1e89afe012299cc9a82e91fe66ff9e15ca83fdcca60c553335639c3df7e5e78dfd914eb3230afa7bca581bfbbcb728ca882f6f5b4f58f94ec9cfa715f2bbbdf1186b6834d45b99d0edc71df2005a34053f23c830f9f871266a67acbcc632bf6204321353b76d11a12f4d53e9402be9d50a03e33dd80c751d805efb8d595ee0e4d34c2727ea4cfcbd269a73ca9c63171cf0033fade687acd1eb864e84574621216cdc08f54805c49ee982e6160395b74445fb37461eadb1442d7653c8743e263133fde3afb287d98eba7987225186cc6e4487547af53330c14a51134f8addeffd3578e3c0893735cd7813cf216ea4eb7c9ade1a10e597715bda97371ae66e7a4cf045ca5f4df25ec80def9aea519da37581b2f979bf12bf26af61e34404c93dfa6d78f2a7a9b304ce4fbd45ad77683a501fac2b96a64e9b8f3f4c6c5e3165e37a5cc46f3ffe142fcdfc965604e3b93b8fb9b36875910eecca08e33c599eb821ff9e13f144200c0376a07b1489875e5a6d16d020d39d7db7fd93d1bcc8a11c2175c2904665651b41840c26d8c09049abd1c75b25007eb5cc02c5cf25305a3a8bfd5589fc8f79f26680df6a1ee84027cd32887f27ce3b52654c5b293561f951249f8d88056669858786d7c34f1d9410224277f2da1e8fd31cf0ed419793be42b514b19d76ba650fa600780bd4639a8ffabdea754ec6d35c2ea5bff3922118f02e7154fa2587682d727637557dc11aab38671d97ae6417b61d70dedb2368f11545f3ef4995484303d704fb554b39b12bd9e86781a2fb840819bbc89ccbcbc285af33ffa0138e4dbfc16a87b7d43c3176340326934b5177f90272d914a78c8b7a365a1969947a9f2dd894f99ae1a3593ccdeb829ce09750754038da3db90c6e6eeb58fe658343dd98f98255aecd7980c9e7aaa431eb95be5e690b54b33bcb7c4e3ac33d308ffa5c1786bacae3c1258b8e3fca211dbaf587ea18d0e78c27e51aff89d1649cd3df3c4df3959aaf12758de2272fa371c6de72dea207e4d251a97c74f5f58e9e1ac56b8c90428a610c33f7d55ea618f04b5d4211e19187c78f2baabcb1669af26b97cc98fb1728a50995b7d035746d8c4144351a72a0ed8a1df1ff41dd6b64004661ecf144d7ea66fd74efbd83897a44c38a7b73c421550fa5d517a0280e614b412c32b9d691cf98be396fad02491119b1f826be1a9c01bed1bbaaabc22448f1f29844d5c10f6174fff92a2ff0b70c13e2548d5f5487f6dddfe66d96373b6474448a4a54448ff61fea3075a9bf0b042afb2992792738cec20cfedf6344436e1470eaaaed2c66a1aab81e85b7ddf377a5a6210848e28f9d073c5fdead8ddede1262da018b61b94cfc15ae43756ca0a2856f705cf34b86675777b492ae58eac0e9d62bf9b363ae2ebd93e1f22746bd50b49e997a388f5611af92666d83d3b330157fc44fa892c1fca6afcf5377ee39e6c2c1a7e931e457405d0702e7dc70c2fd72f2aac9bca04a633ca8b2022183545e3f1ed63408e1321981fabcb7a4d23527f1ff289a21733c2c2a734065115e1284af121589615f958561b9d72a9e1f574436a11a26993552f27e80ec66e312dfbcf7560a4e6146a0ea85ddf10f7022e000a25b2557646350dd41169011467e9fbc0770c89263100c2bc2eaacb524dcbeac18b948e954e4aff0a2ff3d7413676bd6ba65e8e3ac60057b49374499bb11f75d0b20454fe1dcdb297fab959cab99107abfa9b25042c33cf60609831d2fcd6b0526c94d085675a03434d1f77e7958fd1bac7f948a63beb76269890f2f2dea83ede0aefab000f25939d3d41df5ad4ef5d1ea0b07af68787a4d248bcacfdc4953d5b9a1fdf4dcc77f0653d394e50f0b1333c35064896bc4851db4e62427f81712f378048a63c44b6b9325b5f192164bea25734f413a7bb3fa03bc561dfc1678f805ef47dead8479873b8ef771a760138ce3867bd634993922dc10707f2e444f77e0035842fc93383106e8f9ccae92f99d25c32cd7981b85b96083162d303a55dfebfe33a28269f5dfa5e9fb5a5ab86eeed85d11df0704f1e56ec25eaae93738b05cc952a9bea5bcc27a7b42617389721e0a3f60ada4a468d3b80965182bd4e6fe85be49f40794d1b95be0367e2ddc3ad29501505bc6308f43634132b05bc2bdc7118c962a82b6"}, {0x78, 0x10b, 0x4, "299301b742938f90617532b3cb838b2d0834c50d921121c57663d3cf3f3b7cecd9452afef13f632ed77d0765433df9ccfc0aee4a18ec1af243b096d94b6eb568c691117ec2f21a5c1a258c227566c97bffa5389fe9cc3cafa0b38ca995eb505fbbc7"}, {0x60, 0x11, 0xfffffffffffffffb, "172210ffd5304493d5e39d5f84c372a1b198adb6fed98d4bdec651b300a4b17080c8218f24ecc6f80c58b2e3d3c37c3f8e4dd98ffd13bc04e1ff7a415ec026f97a0fb325797738783c56e464ee"}, {0xffffffffffffff53, 0x118, 0x6, "0b0546a747576c51d1966972c06665b71108f44614cf99765faa73a305f586dc5717a1fc7b468deca2099be7ea4e4a39b0abdf7fe6637fa7c3c32d948177757ad7e3bc44a9995f22c9d8047e6d49d951981f6eb9100c0bcf5e649305ecb2e6154f564d17cb80e7f0fe0da78212a292325567e09763a87586df9b3a14787c9f78add7a47d5cccbfc60636f1a348758cc27fb54b542fef4382cfc35b9b650aade707"}, {0x28, 0x116, 0x1f, "5dc58b0cd711e20db8d775ee592b56d3503abab0585b0052"}, {0x95, 0x0, 0xc22, "49597768f237c7bc6bee94df652642ac075c6e39f1c092b78753c8d6dcc1417d693a0838d068860c06f239a050acd1b25e33f5d56edd09dd73f7f700f5d03543374c8f41231ae4cb348e36ed3dfed397c155c92bfdcab1b4895ea1399809454df647e677a1e8a411f87344fc2e513da2904e42450d68dffc73895dd420331f93a636c0ebfbd3ab3bf70fbecdf77ef501f327c2752437"}, {0x18, 0x107, 0x42d41efe, "fe14"}, {0xf8, 0x119, 0x20000000000006, "aa44d99558d1489c634ba10ea6222f76370799e5da86d428981b374a2ccf550f46adca62a20f055bf064d02b1840f92827bdeda7fbbd9702cb186b425bb6cb6f06e960151e1ab3e7252861c29a52a7cb4b9eb1e91ff45920218a1d38394b2e6cf2647f048b679d91376a93cc7e4ff37e5ba80ffae287ace216431a5f06ed531d374f7d99181d80a91c06c76ae5e382b44fbeb7b9470f8fa18b29f6d18d40aefb95ea4d34f2949bacedc3b322b3360a2b49a4288da73c59fe8d195cb5f69ceb45c738a5a79e9a62b3c41decbc34a78d9487f53cf10a9b64f7f01b3c32752b39653aed8e2c"}], 0x15da}}, {{&(0x7f0000003bc0)=@in={0x2, 0x4e23, @rand_addr=0x7f}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003c40)="5bec83e117e9680d4b12fe054c1c8aef86eea11e6820cb8bcd9cae04426491a7583d1c947530e4c216887d05ecbbe0a0f907a45fd9a60665109bc5eec4c856b9d53201739961dc16b74167964640f33ed498facb3e84debafd75b01dac076991d59bfdb6edfc9da4003b48294b48a76b70af262b4bc46a00a9fbb9017ac02254c3865b2af82d9d7541b485b13a0830d48d556866eb082fa0dfea13c465ff4407540f0676ab00ef570224953cddb5a10361a4b2c8532db2e4800edfd6f8550c533f6bb950069a81a31849f6e21288b7de1a4d3af4e05156ef397637195480d070760f25a669a6fdbe3c690559ecc77ccaaace1379d7ef", 0xf6}], 0x1, &(0x7f0000003d80)=[{0x38, 0x0, 0x4, "999da4e5a4b32158a0483f1133f3269d386b768ba1a654584bfc930302906e93b2"}, {0xd8, 0x118, 0x6387, "1d1907ff8eb9e34aa811ab237bcc9cccb2e057e965d45c8f90c6e2eb8bcbde0cd547d6b12512bda5ec87a5f038f53de86534ab7b0841b957d895c8f0e1ffeaa7e39919399dab4b226abe6052e28d46f7844ec366fbb42d7851c847288a84f7d28cb61b5dfdc88d81adaed9f8f5d7d04bed6b32047372fc95b683cb4e5f5a256fc2ed9bd461b2f154cb61877c668a2355fdd3eade4aea1dcb3c4bc95dd511dea7084a88712e4e21673d743eba97b2c1a1f91d0a246bb5f626c95450a4fd6a899390"}, {0x70, 0x186, 0x7ff, "b50500e6b9a972b2a6045affff2246e3cd8661570758e92c84eaed679edb307f9bc584d24197423f9d133439aaa02ad0477634c822fb61ad6ed88bcd97e150251409233bc12e0f830e4b99b1a8096a35c88f0e5e885966167b0ee9e2e7"}, {0x50, 0x119, 0x83, "a430dfbee4de07ce557707d5de675b1bf959983a3d073b59cafefcb434c828577a41f3db94eb575df5cacc0c50f26715919de160b7f8462518"}, {0x80, 0x117, 0x7fffffff, "ca162bef11bf71e7adb3628b35df35f52325b0e9387861ed3a7e16aa2fe7d73a4981499754def4e6d7ccb70cecb1989739d1017725e76f03a719777c6e8f25082a08e5253ac44aa00aeb2e5495ab52798f093bcfb2c6708b395cc8704aaee0dac583b0e3b7e566c78848abfb11ae3f"}, {0xb8, 0xf06822687a0297c6, 0x1000, "cb82eb152460ed1b740bb7cf5c941de3a5afbac5d13aed74f2058b01bb993555557766f4cafc04f23e6dc4d97ef3c016c963f02a03d36c74b312aab2075eba1f1dd60d559a5962bce166c57c07a8cca733702c77911da9ba3ec1f5b8b9f1ac9f304dfb5a20435959b7e0fedcd9d37af60d90a747cbae465a9e299ce1b949011c68c06c8c401dd73d0a3059f67cbee526c173b3d4fec2a7f75378c8c0427b536c34"}], 0x308}}, {{&(0x7f00000040c0)=@caif, 0x80, &(0x7f0000005240)=[{&(0x7f0000004140)="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", 0x1000}, {&(0x7f0000005140)="7c0a93c4e625d2c9cbb7c78c8f8ab863e8a9baef8bc98ab6", 0x18}, {&(0x7f0000005180)="2359f4f7ca31bcb9222163c5dca3aaaec848d3fdf102fcbb01c0957758f371632c7f56c99554d1d1b262b78c440b27890e0b01c48765129824bb3bf27ed4fe2c60a055d1938a0563a45518dae35a5443279bb3bf5ef8d8340c2d920c5fb2e8850dac5e6aa0b8485d6db3d73f25eb88d9f334a9cfec1c5857f1962f61811d8af9", 0x80}, {&(0x7f0000005200)}], 0x4, &(0x7f00000066c0)=[{0x30, 0xa0, 0xfffffffffffffffb, "d957e6a85560f021ec011d445ae3eb00959e78d5cdbe6412962d"}, {0x120, 0x104, 0x1, "baf173a38cce7bf53cfbb4c0bf3062c6649effd88bafe68d9ec98a55219abedea04fb9641d9e7e8c9a5d98527634ea067dec119450724e78caac392139664562fc8207af0bfeea301bfc4f2c45142d97b46afb7821622801ced0452e1107e71215c18334d6b48b2f7eb9b7398627886ba5005323db6cab56c85ccc6ddd49f5996985e50c468c45ef37c5f52667f7d512daaee7a6a27be938aa9482a22756282dba1530600bcd4b27f39f33337e19b4cc2161fad5f7f4e65475b3fc22aadd20b3a206d6799519b0461c81bd503749930fab0584131262ebce2e0e6c5b0353b8c2a27676ac0f047128a13675f2e6a4d8ffdc40f4ee7b1d4fc2617344fb027f574058d24da14747be6ee2b8cc9a53"}, {0x38, 0x101, 0x6, "f0cd746d0d76fb6e53c8fc5faaee52866cfbe490f5dcabcffea0c2a8c40942e5bc28caaf"}], 0x188}}, {{&(0x7f00000053c0)=@isdn={0x22, 0x2, 0x1, 0x9}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005440)="02c9f1a4d354f27bc651f3843d4b910437c135600c6cb5d3a95c37677dd4ec724f07caa907c19f4dfffed48d9c707cb2072557172cd24297decb5b7709817e7dd82fcb15919f98f7ffce870e1e844827b725b8a2d72eda40a8f651ca1b9c4a98c7d168ef57594c53be1ef365de890352df50f7358b0b87c4156545532657239ead76bdc27adcd67749fe125928ba020ba284da2381e497a477a53a6a29fafb1ac78b5a396bf9f65f9e1dd95557c0778a413dda2c62bf5c5d077f7930eeefa07fdc93159dec7c803ccf9ac946e54e5168ca3f96ee7bbcbea3c787929a8d", 0xdd}, {&(0x7f0000005540)="c531dcaaff2c487d52a0526f0009d40f7c39930d9d3882c7667a3743e2b4389584561176c09ff5e98618ae5b569ab51508fe7cf4c25c4003c11922e9378dace90fc92357d5e1d3e5fbc4368e4d26294c6270f3cbc64c1b8239ff94462c154549706b38ed4468e721cfb3ce7f64d7ea323b92213fb91e6e13ec3bca3ccedeb4aaed1bc3b87b62ddc1ce47c0dc203c3708766821215375f8cbdf587c8cb755bded595c3c09cadb7e", 0xa7}, {&(0x7f0000005600)="117f755fbd6901aaf8c57285dac0a765fa61856ece2fa356efd59ba246c0a546757f993a01e32cdd4cdd6e41ad818f1dd6918fdee800f5e73d2e503e2b07b3cfdc469dcb3896184519fbaa3209c52c075fbe6d4d46277aa5ed7d941e37a7db711b153db44618d480460d0b0af993a4463f86a27e2388db9d9a8ee2952d691bdb2d34658c929f4a81edbc6372692b0e77e522c86411b0835cc678536d4b938a2d14077a2c6a58b90e6ae6009aeb16cab7ed003e711a88ec3a645d6171593ec8e6b3e7fda30fa2b4900ec069387388e3cdfb2cb10fb4edfb2c36f593ab993564e0", 0xe0}, {&(0x7f0000005700)="60e2eb6b227cd0243035861e05ae3db00caf860f401128e3f3c3f7c9b4e619fd3407c513b07468db0d725ca197571b01f3dd9698cdbf8a650a7cd98f2f7319e5ce9585555bf9c60376e3eeb6f711901ce3d3c9b495cca436ba956ba08382b51a9230c850ec1dc839d802416df923029dc16ae60cd60893d780aa52c33e6088786f58e8ac55c86f", 0x87}, {&(0x7f00000057c0)="af4c15dc440f38cf0ea42eb9b206016a98b07e9b97471a0864c6b6cafc4e3ff234e8940b1b23060c6e32601fd939e3af38c5d8becb711acddcf0194a42341110121a1cc7a2f76ad42f8996b8691248173db61d26ed0a138096c280480195e338c0b9002a959c353994f8c507ce5f5e22faa1912952c76625bdeb7721f951d3ae5a4e87c9f795344af1b58f7a51b2f815314b5494fc64d95911f7030cd874fe75fcf75efa122e427e78304b9eb8d1c32e41107017bcf2eb251928ba0c78a8d31e6915", 0xc2}, {&(0x7f00000058c0)="f7997983a119137428e037b13577d331cd53eb4a31d6b720192f8574c41c103a0ad88089248df6e7a4b7ae3f217f7999625b2a6b90049c7a18b24152b7bd9fe6f647", 0x42}, {&(0x7f0000005940)="9b2a6412a7ed68f5c295767f111bfcebf10c27f4b483fab5870f2b75301afd4c03e41b3b7946a604c4dba9e75c9c25b44b5bca0c42a9db4025972b18b74248", 0x3f}, {&(0x7f0000005980)="df606cb9eb84353104563e83a9afd0a3c3740cdcbc83f6a4c86c2d9c5b345c0f2a96c34d549be63490222ed48416e6816a40c88a317186b3f2b7d817a919b2f074669d663988638e4424ff8c03ff1f757aec9d0fe0e83855d26d7e61464c5c606d49ce3d3ee3aa45f7b63ee532083f0c07f1444c120f0c9cc9cba6d820455faf9f2341098349d561f4a2d985e5a61de938a45e6755b7e3", 0x97}], 0x8, &(0x7f0000005ac0)}}, {{&(0x7f0000005e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xffffffffffffffc0, @dev={0xfe, 0x80, [], 0x1d}, 0x5}}, 0x80, &(0x7f0000005f00), 0x0, &(0x7f0000005f40)=[{0x60, 0x1fe, 0xfff, "6f97e8e6eb1050f7cc88e7442958d78ce18f9e6ac808314a5bc6312e92f34803be0dfb6b291ceaa349715ed9e2468ab5954147c94faab87aff4a51646e0ad9adaecf8323c88268e5005b98205031bf0a"}, {0x388, 0x1, 0x8000, "c041a0978211e8c71be4388b03b4c9ffe009ff2073c43b5ea5ec8684f8637a2d820ff5"}, {0x80, 0x6, 0xd926, "8a369afc4230cba4fd308e147bf5e191cd30c837f0ccb23677c1ee3c38727258cd16a6f01412cbdc81d4ec04e09fc4d05b513e23815963be8022ed767e9c234ac3299d47400efc8e8d39d26159021dd7ea4c87d38d135cf776027cf52035d4165e7a045db288d8c7d82b"}, {0xf8, 0x10f, 0x517a, "f21b1946e750f1de2bd5a0a6c6647c3455d5a9edefc48101b7ca35175a91dda6f82e610f72b227b7e829e5efd729439b754914563b1f854de2c5f70c2793bed3fabe21d8477d6672429c3d7cd491c0df037a44350e8d0a6bd3c424ef59daa0330ed3c3d0a8680b7238eee6fb1641b2599df591054c1eb141bd442c1df210c919ad0c6adf423dad5601c1ca7ccd89499ffe95522f815dc4e5a9bf77e8dd09ac033eee80ecf5e7a442c61b8b2aaab0ecb8209c8e7ac01ce6d1b8e21e3f772671d0172fb790736ef51bb72c1e46ee8b2eab21f737051999f369a00ef876e8cfcfe581253d3e67"}, {0xf8, 0x18f, 0x6, "03cb1ccaaa21d6a317094272edd602ddf7cff68f582e50ebf96e3e006cb4d58bca8aef0639460ae451ea53bf763418b57e27db37ef6142dfbd9141613b0f37c19f4037282c53e62b9e10286490115d84e551067c1f2ae129a4f12c2c371ad6ef8216e0205021930cd564bb7dd030fa47cd1d53b7634360a6b48dc3a2a965592f8a02d6fbfebb3cadf4f6826bce44413f02632601f7cc73d96e65bb6073d2280cb530a6acb830ae709900f151cb08e495adc7a1aef5a5b3362ed7193b0389a516b6a518a7e5e35e9e9c1372ccd1f0aba04243c0fcefd1d855e27bd6cc5d569b271a"}, {0x68, 0x105, 0x6, "f815f4f858109536047d9f3a0b3aa7b474cc160f39b83348bdfea45d367387e0080d2ae3251a763e7597c1c8c7b729d41ff3c2c207bd9793c6eaaa6d736d52d2fd808ea14c0967ad3aca63e4522460e7e24caf077a0e8145"}, {0xe8, 0x104, 0x9, "3e8c2de2d5154d86a65843de27e9f03cbcc86d0e5b2ebd6752bd061cc871121e52341dd7d208bf4b25c239d23ae1f0d2a6d9e737929e546e2e787700466b699bd7c769a13c2a8ee328a02c841d3a1ee01859977a22e874e4bdc3800101238f5b32f30053329618ee546e2b442bc0d055464c1aa43bd20d82bacaa28f08774d49d74c76be1eb18be0d4c959b5dec5cb6ac681b0ec61f401ba34fdf547f345f07a6ac17b6958b9f8f2c6dbf2f5520cf7f7aa4627d96e591cad3d1623e84453b7b3bb96fc2e9fd88b831a2f87e023749828a9b85de5365c102d"}, {0x88, 0x1f9, 0x8000, "c5a666a35a16dad95b5b3bf42fcc6371ec46e13ab2b94721bfa4453f67562ec11f8ff9ff9fc06f5d4a6f4d2099d6c63f99c03d05ea87ecb73db7745bc8ddc6f3ddffa7c7d94205560a132326f95725eb5b580f12c98eb5b10e360842a7a779d39867a9d96456e2c9543f3cac81ca2f3e9c3ee9809f079e"}], 0x4e0}}], 0x6, 0x84) [ 536.849141][T31286] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 536.883232][T31286] FAT-fs (loop1): Filesystem has been set read-only [ 536.959572][T31328] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 03:43:12 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000001c0)=0x10001, 0x4) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:12 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x90, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2f6) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x42018000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a59b2ab97000fedbdf25eeffffff07000800ffffffff08000b00", @ANYRES32=0x0, @ANYBLOB="08000300cf000000"], 0x2c}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4000000) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x4, 0x2}, 0x10) r7 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vcan0\x00', r8}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2002001}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:12 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000240)={r5, 0x2, 0x3d, "e5cd01189f8ac5222bac801459240ee32bf153d7face5f809c638d76b81a97fdbc411389bacec890581145d97afda76e7193b846887ba1b0eed5c6b6c3"}, 0x45) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:12 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x300000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:12 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000580)={0x0, 0x2, 0x5, [0x250b2bf9, 0x1000, 0x1a73, 0x20, 0x4]}, &(0x7f00000005c0)=0x12) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0x48, 0xfffffffffffffffd}, &(0x7f0000000240)=0xc) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x9, 0xfffffffffffffff9, 0x6, 0x3, 0xb2}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r6, 0x1ff, 0x3, 0x1, 0x10001, 0x0, 0x80000001, 0x0, {r8, @in={{0x2, 0x4e21, @local}}, 0x1, 0x3ff, 0x5, 0x0, 0x4}}, &(0x7f0000000440)=0xb0) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:12 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x400000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 537.814910][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 537.814924][ T26] audit: type=1804 audit(1567741392.924:232): pid=31377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/467/file0/file0" dev="loop4" ino=1098 res=1 03:43:13 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SIOCRSACCEPT(r2, 0x89e3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:13 executing program 3: mkdir(&(0x7f00000001c0)='./file1\x00', 0x102) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x6}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x1, 0x1a800) keyctl$link(0x8, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept(r5, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="61aa8e44e06d000000", @ANYRES16=r7, @ANYBLOB="200025bd7000ffdbdf25030000000c0008000900000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008850}, 0x8080) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f00000002c0)) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f00000002c0)) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_NMI(r15, 0xae9a) ioctl$KVM_SET_REGS(r15, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r15, 0xae80, 0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa008002}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="bd89367b2b41adfe7607c7814601bb1209000000", @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESOCT=r10, @ANYRESHEX=r11, @ANYPTR, @ANYRESHEX=r2, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="a1b194854c01a94dee881dde34b4b3c8ad9b2782f615cb12c316869a7368e334c4beae7e14401aa0900898bf32ebb9648af3ee618bf19c036fd380988342ed8ce2749774c58f16c3a30ba70105a49713284e4356775ebcc09c6f145d588416c9b074bd396684bbdf0801d987acc34418ecf62f1f1fc4135f25b90070c84daa1a98d8a444167c5f22c582d92c3cd00bcb5805a98ced592e769915e8b7289107eb92b525cdb4b2e5a57925213c49370ff2f504d355b787cb4b5146bcb126c754f156fbe7a61fbbf2ce44e56a1f5742ff9903841e3d63804640d72f1ddb733cf3db04eedbcdae67139f502632ffd9d838", @ANYRES64=r12, @ANYRESHEX, @ANYRESDEC, @ANYPTR64], @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=r15, @ANYRESHEX=r17], @ANYBLOB="000228bd7000fedbdf250300000008000100000000000c00030095090000000000000c00050008000000000000005f3bd51d81000000000000001600050000000010000000000c000500080000000000000008000100000000000c00030000010000000000000c0002000400000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4058}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) [ 538.051348][ T26] audit: type=1804 audit(1567741392.964:233): pid=31381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/467/file0/file0" dev="loop4" ino=1098 res=1 [ 538.129566][T31408] FAT-fs (loop3): bogus number of reserved sectors [ 538.136105][T31408] FAT-fs (loop3): Can't find a valid FAT filesystem 03:43:13 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000340)=""/169) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 538.484082][T31408] FAT-fs (loop3): bogus number of reserved sectors [ 538.515045][T31408] FAT-fs (loop3): Can't find a valid FAT filesystem 03:43:14 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x8, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{0x3, 0x2}, {0x2, 0x3}, {0x9, 0x52ba}, {0x1, 0x1}, {0x9, 0x100}]}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000340)={0x0, @reserved}) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x0, 0x98, 0x4, 0x0, 0x0, 0x6, 0x8000, 0x2, 0x2, 0x7, 0x0, 0x9, 0x401, 0x2, 0x7e08, 0x7ff, 0x5, 0x7, 0x5, 0x6e82, 0xad, 0x5, 0xffffffffffff0001, 0x2, 0xfffffffffffffff8, 0x7, 0x7, 0x9, 0x5, 0x7fff, 0x800, 0x2, 0x1, 0x8, 0x3, 0x8, 0x0, 0xfffffffffffffe00, 0x5, @perf_config_ext={0x80000000, 0x8}, 0x9400, 0xfffffffffffffffb, 0x10000, 0x4, 0x6, 0x9, 0x2}, r4, 0xc, r2, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 539.122160][ T26] audit: type=1804 audit(1567741394.234:234): pid=31431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/416/file0/file0" dev="loop2" ino=1102 res=1 [ 539.301487][ T26] audit: type=1804 audit(1567741394.234:235): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/416/file0/file0" dev="loop2" ino=1102 res=1 03:43:14 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x500000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:14 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x4, 0x0, {0x3, 0x7fff, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) r2 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x8000, 0x2200) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000280)=0xe23) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:15 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) getpid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)=0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) perf_event_open(0x0, r3, 0x0, r4, 0xa) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) tee(r2, r6, 0x38d, 0xa) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000003c0)=0x1ff, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r7) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') r9 = add_key(&(0x7f0000000340)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0), 0x0, r8) r10 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r9) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r10) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 540.172730][ T26] audit: type=1804 audit(1567741395.284:236): pid=31465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/417/file0/file0" dev="loop2" ino=1104 res=1 [ 540.979536][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 540.988073][T11958] FAT-fs (loop2): Filesystem has been set read-only [ 545.710510][ T26] audit: type=1804 audit(1567741400.824:237): pid=31398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/501/file0/file0" dev="loop0" ino=1100 res=1 [ 545.733105][T31401] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 03:43:20 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = socket$kcm(0x2b, 0x8000000000000006, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x20, &(0x7f0000003300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x44) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e40)={r5, 0xc0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000002c80)={0x1, 0x3}, 0x0, 0x0, &(0x7f0000000540)={0x3, 0x8, 0xffffffffffffff29, 0x67}, &(0x7f0000002d00)=0x1ff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)=0x3c9c}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0xffffffffffffffff, r4, 0x0, 0xd, &(0x7f0000000200)='cgroup}ppp1.\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r2, r3, 0x0, 0x13, &(0x7f0000000440)='bdev%vmnet0keyring\x00', r6}, 0x30) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r7, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x9b2}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in={{0x2, 0x4e24, @broadcast}}, 0xb1f, 0x190b, 0x4, 0x5, 0x4}, 0x98) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:20 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000001c0)={0xfffffffffffff776, 0x0, 0x2015, 0x400, 0xcad, 0x2, 0xfb, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:20 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x600000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:20 executing program 1: mkdir(&(0x7f0000000540)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0xb7d23606c32eb197) r2 = inotify_init() inotify_rm_watch(r2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x1e0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380)={0xffffffffffffffff}, 0x2, r6, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x44b) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000480)={0x11, 0x10, 0xfa00, {&(0x7f0000000340), r7}}, 0x18) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:20 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003a40)={'team0\x00', 0x0}) r7 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vcan0\x00', r8}) r9 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vcan0\x00', r10}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003a80)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000003b80)=0xe8) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r12, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r12, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000003c00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003c40)={'team0\x00', 0x0}) r15 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000200)={'vcan0\x00', r16}) r17 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r17, 0x8933, &(0x7f0000000200)={'vcan0\x00', r18}) r19 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r19, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r19, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getpeername$packet(r19, &(0x7f0000003d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003d40)=0x14) r21 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r21, 0x8933, &(0x7f0000000200)={'vcan0\x00', r22}) r23 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r23, 0x8933, &(0x7f0000000200)={'vcan0\x00', r24}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003d80)={'team0\x00', 0x0}) r26 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r26, 0x8933, &(0x7f0000000200)={'vcan0\x00', r27}) r28 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r28, 0x8933, &(0x7f0000000200)={'vcan0\x00', r29}) r30 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x8, 0x4002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r30, 0x8933, &(0x7f0000000200)={'vcan0\x00', r31}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003e00)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004500)={&(0x7f0000000840)=ANY=[@ANYBLOB="98060000", @ANYRES16=r5, @ANYBLOB="00012dbd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="2001020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400600a000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff7fffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r8, @ANYBLOB="700102003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff07000008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100757365725f6c696e6b75700000000000ff000000000000000000000000000000080003000600000004000400080006004efeed76d029d4fd5915f8fa727e083a4a9ed0e9e127e2592f5265db67bd427f3b3af8cd95d5cdd15621f7e1d9ef9cdc7412a0d544473580bfd869a9698626277d81fa2f2578bcae2643c224f31a", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="780002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000500000008000100", @ANYRES32=r20, @ANYBLOB="680102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="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", @ANYRES32=r24, @ANYBLOB="080007000000000008000100", @ANYRES32=r25, @ANYBLOB="680102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400020000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff7fffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400fbffffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r31, @ANYBLOB="7c00020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ffffff7f08000600", @ANYRES32=r32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040008000000"], 0x698}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r33 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r34) mount$overlay(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='overlay\x00', 0x201810, &(0x7f0000000340)=ANY=[@ANYBLOB='index=on,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',appraise,fowner<', @ANYRESDEC=r34, @ANYBLOB='\x00\x00']) 03:43:20 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x7d, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x3}, &(0x7f0000000240)=0x8) fchdir(r0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'hwsim0\x00', 0x3}, 0x18) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x2, 0x2100) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 545.738719][ T26] audit: type=1804 audit(1567741400.844:238): pid=31401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/501/file0/file0" dev="loop0" ino=1100 res=1 [ 545.747311][T31401] FAT-fs (loop0): Filesystem has been set read-only 03:43:21 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x78}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:21 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x19cd) fsetxattr$security_selinux(r1, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0x2) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r2) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000200001a000000000000005400000000000000440000000000000002000000000000000f0001000000000002000000000000000900000000000000ff000000000000000100"/88]) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x10) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SIOCRSGL2CALL(r5, 0x89e5, &(0x7f00000001c0)) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r6 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x8001, 0x52ef2ea1d2245b2a) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r6) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:21 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) 03:43:21 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x400) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x1000, 0x0) sendmsg$nl_generic(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, 0x10001, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1c}, [@generic="3d53f0581137b19798343b70eb888948d26fa6cad01b6f2202ae25c85d87045bd28302f686d8a1df87129d6db519b9b8b18a28ddfb38ba1f4ef0098b2ce0dc4606913e1ee64cf3dcf9b5c1a261e70e9a7d47893c8e1af637b013e4c178dce530d2676f39b7cefb94a73ea1cbd59721444d7923ffc2117bbb74e588342aee23ae6a20a73863584dc62885aa7726fd3ddbb9c3c9698cd9b89c3e164b4f60b286c3d31044df3c5fd108ef00c91a005e3615a59c1ec60b9f776936a8684cff41e6ee0eeaf29a4aa2a990d99aa24193e9d5d60f1e156aef97ec96e79ad7031380fd5db043fce8e42ac755ac20f99b96d2d0"]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x4040081) 03:43:21 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, &(0x7f0000000200)=""/46) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000001c0)={0x0, 0x18, [0x9, 0x8459, 0x80, 0x2, 0x5cd, 0xc8]}) 03:43:21 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xe4) socket$inet_dccp(0x2, 0x6, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x8) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x53, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x1000, 0xfff, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xf, r0, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="00002cbd7000ffdbdf251100000008000b000a0000000800020000000000080006000100000014000100fe880000000000000000000000000101080004000000000054000100080009083d000000080002003a00000008000b00736970001400030000000000000000000000000000000000080004004e23000008000b00736970000c0007001000000000000000080004004e2100"/162], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x68, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x255, 0x5, 0x3f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffffb}, @IPVS_DEST_ATTR_U_THRESH={0x2, 0x5, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x4) sysfs$3(0x3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x2, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x89b6258f96302ea3, 0x10) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000006c0)=0x400) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000340)={{0x7, 0x5, 0x3, 0xff, 0x3, 0xffffffff7fffffff}, 0xae, 0x3, 0x80000001, 0x100000001, 0x7, "8dddee91e9363e703182ffc11a4929a5e5fe883bf27b6d9f3a49fffa099b0d15bb39a3b0b0045fe7853976e935c7e3c5b3123b0dea917ac2dc452ede9befa37a5fc26459023673b9ae8e45a8ea712f1e987eaca2951bf6ba93fcbb6c933c2e7edf99405af62bbd4870361a6c3289e1e2967d614fa87858bd5fd583d7b0780108"}) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:21 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file1\x00', 0xfffffffffffffffd, 0x6, &(0x7f0000000640)=[{&(0x7f0000000340)="415fea4ff0bdcf9b97f5f7b32ec63a41a70c9e71f6c027a7c91e7a586688ead81907534ad61ec25194810668be0fa9b184d544f55ce28fd7e523930f56c92d9eac1d23f6600a059e013f82fb5f6caeffeaf57bc03741945bd0d91355ec5a7294cede11618358f3718ba511cb71772be2609d728050e79d14", 0x78, 0xfffffffffffffffc}, {&(0x7f00000003c0)="0fe9711a806bf064a3f6815e0ca51ed27e7350a91a573686dc62d7ea1e7d997dde2ba713747966439c77f32ec972544c288b32a23c65a26225781d42e3f121359def96a0f20ffbd29e517f7fe2b749ba4128016d9220ea5adc1631de365ee79ba1148a86ef551881d6eb18bfee51b3c28cb1b8ec2a262f16a67c9dc2594bcfec7f6eab1bb686e5a5624bd0cc4a14666ac11cb12682fca727ff64f0684228694fb725ca1dcf83b99757c003ff80023eeb5892b4", 0xb3, 0x1}, {&(0x7f0000000480)="5969e1184cf552a293417287388a88c9fe34e882d4186d1957f611f42387a10b69717289fadd39dd8ddb6d077916a43b8ffc7a5379371839943c1df571acfff1fa3fc96fd618a9fab3baf3050eb6e748bdc8b5f456526dd61ecc5c6c7a789c6d82beebcbd47318f7c4a43beeec9ae06ac24354694edb06008f02cccbff37fd421d25bae5f688282dd062aaaf7a", 0x8d, 0xfffffffffffffffe}, {&(0x7f0000000540)="4132ba7810", 0x5, 0x7363bbf6}, {&(0x7f0000000580)="7c553d541d4542535362817de292653397ad9557", 0x14, 0x800}, {&(0x7f00000005c0)="f054cbf3a390e2c37048015a31b9", 0xe, 0x6}], 0x54000, &(0x7f0000000700)={[{@utf8no='utf8=0'}, {@nonumtail='nnonumtail=1'}, {@uni_xlateno='uni_xlate=0'}, {@uni_xlate='uni_xlate=1'}, {@rodir='rodir'}, {@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}], [{@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '}keyringppp0-'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200)=0x4, 0x4) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 546.803614][T31564] debugfs: File '31561' in directory 'proc' already present! [ 546.929765][T11958] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 546.948405][ T26] audit: type=1804 audit(1567741402.054:239): pid=31565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/502/file0/file0" dev="loop0" ino=1107 res=1 [ 546.982945][T11958] FAT-fs (loop2): Filesystem has been set read-only [ 546.997045][T31523] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 03:43:22 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000005c0)) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000640)=0x800, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8011000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="cde86ada70bc9537370b865d51e6de9c65169f98b372bee28e813c7aed82e8824a3737121bc5955380b3e5940070069500000000000000175187235baeec919e6885f657cc7aa6302a4a1318bcbc0af305aaa14df19d8046fbe31ec987221ac315bddb891d9a7bc99c415939bf3a1c8d5123a79cc2d6db60d064a6f492d7665b30ba7faa85d67fd524e5bbc6722c17de43136844c58569c526034936c99a6640a8346a7f19b996a4", @ANYRES16=r6, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:22 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x700000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:22 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x20, 0x80000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x30a84) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) dup3(r3, r4, 0x80000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) readv(r5, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/241, 0xf1}, {&(0x7f0000000800)=""/44, 0x2c}, {&(0x7f0000000840)=""/4, 0x4}], 0xa) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 547.012929][ T26] audit: type=1804 audit(1567741402.054:240): pid=31568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/502/file0/file0" dev="loop0" ino=1107 res=1 [ 547.020040][T31523] FAT-fs (loop0): Filesystem has been set read-only 03:43:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in=@empty, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f0000000400)=0x0, 0x0) setgid(r8) getresgid(0x0, &(0x7f0000000400)=0x0, 0x0) setgid(r9) getresgid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() getgroups(0x2, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff]) setxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0xea1249a12ef0029d}, [{0x2, 0x0, r3}, {0x2, 0x4, r4}, {0x2, 0x2, r6}, {0x2, 0x0, r7}], {0x4, 0x6}, [{0x8, 0x0, r8}, {0x8, 0x1, r9}, {0x8, 0x5, r10}, {0x8, 0x1, r11}, {0x8, 0x0, r12}, {0x8, 0x4, r13}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:22 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x2000, 0x0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd18a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x110802, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$setstatus(r3, 0x4, 0x6800) creat(&(0x7f0000000100)='./file1\x00', 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r4) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000580)=0xfffffffffffffc01) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f00000002c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x920, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000340)={{0x6, 0x2, 0x7f, 0x1, 'syz1\x00', 0x7}, 0x1, 0x10000000, 0x8000000000000, r7, 0xa, 0x4, 'syz1\x00', &(0x7f00000001c0)=['syz', '(ppp1$ppp1\x00', 'vfat\x00', 'cgroup2\x00', 'user\x00', '\x00', '\x00', '-nodev\xbbem0,\x00', 'syz', 'mime_typeeth1.$&@wlan1:mime_type-md5sum\x00'], 0x59, [], [0x10000, 0x9, 0x40000000, 0xfffffffffffffff7]}) 03:43:22 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x800000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:22 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000001a80)=0x3) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000001880)='./file1\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0}, &(0x7f0000001980)=0xc) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./file2\x00', 0x0, 0x9, &(0x7f0000001780)=[{&(0x7f0000000340)="9a46c591a944d8f1cecc9eb47e8f370edddd691264bf8398c3a3c1d026cf2a4953e838237fcda4092ef98867d537ace728de898d44674de2066e", 0x3a, 0x8}, {&(0x7f0000000380)="cfbda73bbde336eddc25c32b67f0299de6a2d6b1b73598efb6eb9cb16829be6bd67a7c1e", 0x24, 0x2}, {&(0x7f00000003c0)="a2e978c51ecdfe93ab2f2b978b697715db4e36c3edd526d8754dc84b6f4e0b21ba8ff970dcf17bf50f4d0b75035e3675a6b7eb8e7630921be061d73a3349c683ff0b1792abb4b3d210c976b0230d0226a44b87a7417000689af8b7b56dc8ab807d8d0e900778361b72c2e36c872bfcf6ac3155e9e0506656d72438149342b1b45e63bd128c53dbcdab1048cb18e799d40cc5d495706476628805bbe379c6eca4efd7bdb9745134e447bde76b55", 0xad, 0x1}, {&(0x7f0000000480)="1c1223c690e0ebed958cc4e53c2086497a76ad11e87e87a54a0342d92208eefc90aaea962ecfff2788b14e229a6e055246", 0x31, 0xffffffff}, {&(0x7f00000004c0)="31a5d195b40c23134815aee3534366ac16dc69778cf425c57425792972afad7308315253a8072ad5e370328244992ba0993971672608b3ecf13f6e6c0e2851bcbc5ea767371ab4c0a88727333ed518ffcaab0b82111276338d274b2a83b3a59c5f96118331474f5d6f2f53d25c800c8b8ecb92587265e521f0e92e68889db36072afc9aee7e345cf09e85bcc1e811941afbc7c5808e31bd8ee30285e8deeb664befd03d82b72313c06f987fb23db26160b3cd2b387ddb251573e133612298e838b9d7a0df6694a0a43bb5248be90131e705e7a5d511ec3237e10b86b171dc30a822187e73f2b19fbd5deef2be3de48984b82e807f6b9", 0xf6, 0x4}, {&(0x7f0000000640)="b71fadec835c34b5cbe4ef20ccd77d0b2dffe98669b3ae731d1f88d3ccad728614148c7c4026bd60c418a593192ea723fa1782aab5197b3131946e3c305238f0175e2a782be99536e3afefaad5765c4934eb7c24ad87444ddaf16578dd2016ea2972c968f36a77598b8f949976db4a8de4604886d75c30502fdbfa8c9bc6df3bd395e8d9c48f7f2d983e5b6fb9349eb694bf6df06b1fa69f62d9551c145e5e2a54f6bff89a4bf3899bfefc39c66a5ba85472b56fd68faf8cde4441067caaaa082601ca6193e4132387464d490ff381febeaa0b109a2e81862c85bdcc2727d973ba87c050c5485aaeb8759b47b7244caec9d2216d4034133a1af9c40c1daa07137cb2545d1f18596b6c1b064ceb4a197ba85c0e85a93dd185eaaf2bad08382d8c7a8ddb4c900c98e0902f434e64ad98601ca1d872b861ac06da3bc5b77c97b64d6dfd595ccdbd0878c1dc7f046bff525f78c9ad4d129aefe87dbfa3d5581505a7b32b1d21f5423c5171ee397b27c0735a51d688a5d16bf66c7f5004b912a04dfa3a576879d92a04377b05be6bbf1d0b7866742e214a2bb588e185309bde2643c607517bcb97d357c1542382dd44489c344253c16b041c5c06ffcf8c2485f1ee0e4ef1d14c8159c1f7db3cb371594f062a15b19096f4ec567809a8363778777c1eb11f1dbbda481565ccfc8ea528f3465a8cfb367dcd1e513eca9063cb6f16b23a642d901f71185f856c56ffbd9418cde33992be9130d39f371ebe734460215c42092be7acffb7333ad0f5f3e7ff50f6bea099fe3ac6ee5eb7a3b3ae5307cfc4b6242624faf9a0a0d81fd610a4a6a77a94960548dc45d5b3c1f5080be5a420bb097f26b631aa4650bacc6de070add62032a69cb286d5a4b65970f9c105289a47886edd52c8cb8fcbbb8424e31de8bac34811bd021e93555b36cce942eebef80e22d691ec5a0ae0629937d03005113a6f78b184752853dc2032b2b99c60fd5a33c6a60cbcb5d57b75e795946802ffcf7ed36e9677a9a9b2aaf1d2d6c94e38388bd9c0fd8a54257419efb76517ef6b162e11dd1f0f89db80e8773f2119a203861d9a514cf4d1c8c1a8ed3dc6c92a36cbbe06ad1a9d66ae20a43ec9ae5d7c673f21f3e504f4517643f7267d6c088238e11f1bed153c82da813e60bf8dc11a0ed8c4b14560eac383219c162c3ffb6577537d8e894693642e0ddabad1e4e32e4fadbbf746eb6368f49e4120ddfb54f62fbd9b64668eac606e7bcc3b6af81ae8a8da639bbf82e842936e844789b34826b3c1fa632a46500b2a7895a6f649db5fb59e0831466b19d0db9bcd1c134beeadee115887ec84dffef5f9c9df58dba6891a16e222a4cea66b6b8f2d9220ec34c32171b4849c2eb18e20cbe7f538994d7ba34dcab82ad71051d4aeea25f69042886b43b1f14dee1fd580dbfcfa74e700f515afdc366259eaa75c33413c9ac1ff5deba0bb60ee12b7f8ee24c7a8bcc9eb4e1b24d90cf77f661ec06f17807b7d1fb7cb6d6a37a5759be93eccbc01cfb4a380fab500d13a0ad016caf0e70a5c4d33ea0e543351ad7cdeb8e2d46067a68f0b6b7c2a8ee2bb1a65047d8e934711d0a177461c90f58a047c933c93d65fde5040b5188c00a5904e3bab17a2b69d305ddf19399f980335bdbdaf30f12528fa38074ff577781f8a4e414aabca50b57d07ee810730339e378e475ea58f5dc3251e3193cda91bd7ada2b5894545b4954c384c545f3b4889bf56557b0f22e89e8be2f25d5e68f92362eff77d1deb876c191cb736356695db752df5a4a62fe4b60f387e0080796687833a492ab6e27434cba4ed113085288ebad8823d837d65f4f53722fcb71e66626caac78d73640c5c3c24ccea1e9af748a36f2810d06a61e95644cc58f056472a342fc9c15e57bc7366e7a30f9628c7def04a93ab96b267262c75f037702cef849da14da6798ac19d2e70ba42373a303bfc5881142521cd5df56e4d09b6681075fa7e56f2d733ba53cce6d3799737a8edbaccd0162d5602752af278eef1fe51dd641f8140d1cd075168f69e7fa3730502651eb36f588685219960353d2fc2277a899af73bfde6af3abf7a156150680e81655a02240412801e8e6721f52ec2d7080ba898e9e994697252d408a51f59cc246ab2fb21f6b3927eb5f57c6cd53d98db468ffdd140744cf702fee56c11d800520b62393e247fc2cc10722e082812a8cc5d6043eecdb10f86e02afa436e6ca203911e38e8595b5944f68a9f6f37e8532220b4c0fcbebb90577a99cd389ba14895195405499c5b52305b67ddb9bf735e2937daf1f0ded8ef02e82bd2dbd72c8cdd9755993ccb40337e6719bfd567104728bb637741843da248da15251976209fb6eb956895bf933589087066cd2f9708e3f88be39a0614605fc35ddc8643244ffe5a42d764153234aee173621aa93156c11ccb2230fdebcd97f23bd87c5ac0b8b17f062e34ced3468d8bff2f2dee510d9ecfa0051ac7baafb17c6d805b94c6c60cc6c858c9db0ebc63aa5924fe1d98785673abfda7ec47690f85a477839c08dccf6a8deda2609d3771163391b3162cafaef4c1eb7e84d8150f055cc68d44709b6722b2dc5310b64f9b68d28759ab678f04f2889c55d4e0c77361adc0d5d6ccc4c9501658672ca371a08ff8994db20128cccf627ebc2c10901ed549790d3fe7011902ba18746d44cce4390a288afa3d8ef9875fe20da0d79d6fa33403dd705f59eb97e37348ace527f88da76d1570be4bd4e6b456c6ed7b079c70ac7ffdf6f675f92d8c377a4d6d3a8cd5b4944db332a9ed9fa8e951efd7d0631e9bb69954da6d531a9ddf4852ca49c3053f448fe46b36b230d6f90568892712745e79c665963fc86ba0b63370c930d9a3f45c7259e5a42a2b48092996e260245a48d8c772229ade75261a562d7269036fbbe1a746c383656a62c9ea8910d7f6ec2c95e21c25ae1508f6e5f09105f6a3762751f44f1b78a710bb9cc5e87928a16f7177a6b2788cf9b7eeaa9209665e7d68dd1995136ea80b584de798db799b739e7565ab26b354342f08a1a23beedda0900451a120e7b35e7a46a8e6267ccaac0e344d96f79c401f17c0473b68f91c94f942a43bc6c3817a9f57e032033c3ca1915adf09b6b8536428ebfef3213fac62034d663f715520add41f7c16533c7023b7a7906b794010414338e4b4912255377cdd711daa9c0228b792df6385f41324d82b58bbb083212147986bb8999d122f83db2ca95e6e7937534f3bbc47d029f4377f7b9f97a9e3ff6d03ac1e5ccb914198bc6382f8c8e4b6a997571842fb095b3e47383b67ff74026b989697becf9e62f61b5983332ac47db60e10adab40b67311f782e6bb15273e70688477d4a4ddd3fb946f943e2bcfffa5b49597da7275e421df61b69def3e129845f0483512ebb1a72f297bd8d66148f61b87257b51fee3fd56919612bc4fd6115699b99c7518337f968df9fe86a133a8b4161b1c2f6c7d41b9187a088a8dd290f7be0dd575dccc9a2ba7910bdf8523c7a7a82a04b15e82ac7d5ba526736e2268ed94e95a1f21a92ee0328aa9083998a02545848c2f91f86c80bbe17c0387990c2ada8c48adeda0cb4641c879fb5707d69e5f5834a03983db03d9239fd467a7c38bca882a825dfea8cbcd2fd2409683a757559bf52c2eb0dc4e55b75c651cfe5488e0a9e38bbf0f9b83d71ca79db1a4d8659efe21e5e212c170e2be1a72f2301e6d418076db1a5a686d69dbcc6040538779921a5a34c9371cd45be2b7d9094425bf0ac3094375e5a00387a7792054a87461307a590d09d7de3c1245a087eb6a3fdc0b182a72f5750a4e4be0b18b645f91ad1c8232c41787a4f73d40718a80582153461f827badd55b5b4e2be9b095e52078909a8671e97b42ffd7ce445f14b42c694ae419e152ee86fd1e7c8cd9d2e86810d3ba6625cc30de7b762927ea275158e861ae7ea8c38b3b10bb81a5fe7d27f1ec5ddec9854e7ffaaa4ff881cd6080f3d4928098e0033dd041424a78bf823bc740a11dc59aa515a63837466fe281d9bb8b0be7be4b64ab8e4e6bff545e8ed39134eb659ef6af973af43e87a0c8bff93d441d379b331565eeee19412d94aa467f592a8951a0cf51d9e40d0084b05fae573397eee6eb7562f47f5653ab9c90b2dc7dd84cbe129fb32dd83feea7ee23c0400af9ee49f770fff237c0456f6505a2785089b658e1e5066c8d3507f6d9cad4c71524f1271097131c148b7c6b4089250db6ea2091f85fceb5bc11ec1a27c22e2b11c1c5ac712391ab6b7bb0a4a6a80acfb38ec53518c54f4517943138dbb0e43f02ca6f307e584bc76b7574b0c81dcf056e037edeea260544538ac30c32d00e1fb0fa3254a651e8aaa23c5ad807f027279bff9632f663afba2ce668bee6e2ea285b29fb3ce744d3f5d8c3e14ea87a22ff011097165043d02b4930e703dcf89afe6bc034128b967bde7cbdb882f8d095989c9c51d7d5b6f168c711b815943b6ed149e1540bae9e781da713df411b330705accf8d1b159b52b14936b2b9c79be43abc26bbd87e213b3704f5e68c5893fb25df091ad42c0a326fd5f6dab86295230fbad10092733b4d74d6690268362c514d5a307f25f047b3e777f743557485afe5177af46406de00d13c648b0d6fcf37905b8b1ad3b54801cebdb01c378f10e7e7dbcbb9372a8dd09e91f845bc9c3b41915b84fc334706fd4304ace7fe31203f234c8d86f98bc08161937f7473a118f086af4a80a33d2193e8827080baecbb1c90717f197885e5e9add8a8734290cf4afbfc1590200917224f6b02eacb76f9d30a61af8e40dadb7fe0e6cbd5e68003e9875b4a8ab9610a91262d743e85e278c4692a1d3432db128732aa128a7897d003ae7266a7efb0c344b055ed82c1c3f5ef9310938ed87fc029a01d488b11479a2c192622c4b287155c2f758b96af4b51d0404316a44eea91f8208916236e63a8147c394322a062c4153181d6eeb2c8e48484e448166a9b533c323dcba2e0e526612cbe64380603ba0bd9102a0b7a303010428a4ad51143b53b388e031f813d3189387092249a1d31f95dd498ee1e86700356b64dab0dcb5a2212ce80172787572df60d6d1f7e595a753d73809a9b36d043024775f7f2c6ceccff6333142762f78bcf1f37b5313dd42a014109e14ff2740e4dc56b460e7955de8ec4dfb2b2e946fe410ee08d7967e020d36baad708b68f229a818d9e300b4ab53362884c45750aa06069c0502b958accb31913d0705b81f95ed76ea38e3384b91d73363c2a3ce5f4f0a3a8aade1b50eb73d0054b6709e19898da5a354f4903f4d9ec2e0e8f7fe0e96cdc95ee7a05dbfabf32412cb8aad17a5e5e8d4ed13edae2bc44601809e6cfe9315471632c06ee048569f084697bca611d53793cb6283ef110cff7b7630d2c56f04ba51f011c7525112f68bc811660414409702597d66aa5cfc6d600244bd7be5d8635739c557f42990912d58bac363c457002d1255d5a2bb1a2ff8d0a6b6e609f8d6248ac3bc89c8aaf7f6ba4374ade679bd96ee0be0d72bcfa87c67e8a33066ad1c19f8d147698e23aacdde3d229694acf94d9193ae841b352df1d7920a716d1e40131dc519f3237a4e3423901929b12e08238d5107f37a55c8d556140a67cf574678eaca556d3241f5e02b2240fef56a032e985ba9a30d23ea6ebcc6af368f3e26414965ada29214d2bb3f008444a148a11c8c98c8c0da4d2bcbac488ad7fecc5057dff95838b37aac721dbffd562fac5e249e3ec308f21cef401cc04a7e3", 0x1000, 0x40}, {&(0x7f0000001640)="9c66a602b5dd6c9a06f0f309931496ae2852d71f2a2bdd7a872c11875ceb9c26a6b589c809d05ca3a59da00eef91b28064abf2bbb20e63fba9a909d5df69333cdcad79be3a7cb0ebea62748b6277002b8dcf00a8d6c1824ff9c0748c11b86b4754e8a64cef8d8a", 0x67}, {&(0x7f00000005c0)="88676351d4653b001f77b7ee133373af26b434ec7b544a64a95e46dbf4f8aa1e9e956bb80aa5318d62bb4995b376a93b8179af3ddc48d6", 0x37, 0x100000000}, {&(0x7f00000016c0)="e49803d210ebf82350fe362eac5065da6d9c7c16afa15c8d8dea8181951fe10f0e8ba99a7129fba8a4b4d4da3c5e54594027b8a32d1645810b575b6893b1834ea1ff6ee6f15ec1f3c606a36fc06533d8a360261a5c0bad9c40bee2746774c7c05f5b95aaf525e39f4a492ff56af8e48dd4c9f0540a81f0a4893b08d6fe50623ea7e187bf", 0x84, 0x8}], 0x1000010, &(0x7f00000019c0)={[{@delalloc='delalloc'}, {@bsddf='bsddf'}], [{@appraise='appraise'}, {@audit='audit'}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@fowner_gt={'fowner>', r2}}, {@euid_gt={'euid>', r3}}, {@dont_hash='dont_hash'}]}) fchdir(r1) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000001c0)={0x8, 0x2, 0x7, 0xae7}) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 547.549859][ T26] audit: type=1804 audit(1567741402.654:241): pid=31596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/469/file0/file0" dev="loop4" ino=1110 res=1 03:43:22 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r2, 0x800060c0045006, &(0x7f0000000000)=0x100008100) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, r3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 547.663430][ T26] audit: type=1804 audit(1567741402.694:242): pid=31604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/469/file0/file0" dev="loop4" ino=1110 res=1 03:43:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x8000, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r3, r0, 0x0, 0x12, &(0x7f0000000400)='trustedtrustedGPL\x00'}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x48da3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f00000003c0)={0x1, "ba"}, 0x2) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff1b, 0xfffffffffffffffe) socket(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000280)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x800, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000380)=""/37) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) 03:43:23 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000340)={0x9, @capture={0x0, 0x3, {0xa8d, 0x4}, 0x2, 0x8}}) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='rxrpc_s\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000440)={{0x2, 0x7, 0xfffffffffffffffc, 0x8, 0x0, 0x6}, 0x1f, 0x1, 0x1}) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:23 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) getresgid(0x0, &(0x7f0000000400)=0x0, 0x0) setgid(r4) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x100008, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}], [{@subj_role={'subj_role'}}, {@dont_hash='dont_hash'}, {@subj_type={'subj_type', 0x3d, '/'}}]}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r5) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:23 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 548.536716][ T26] audit: type=1804 audit(1567741403.644:243): pid=31651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir054760431/syzkaller.fTh9zM/475/file0/file0" dev="loop1" ino=1113 res=1 03:43:23 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) socket$rds(0x15, 0x5, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:23 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0xfffffffffffffcee}], 0x200000, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x8) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:23 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) seccomp(0x0, 0x1, &(0x7f0000000240)={0x6, &(0x7f00000001c0)=[{0x0, 0x2, 0xcb4, 0x7}, {0x5, 0x6, 0x80000001, 0xff}, {0xfffffffffffffffe, 0x0, 0x6, 0x7}, {0xafc, 0xa0f, 0x9, 0x3}, {0xfffffffffffffff9, 0x8, 0x20}, {0x4, 0x7f, 0x0, 0xff}]}) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 548.988201][ T26] audit: type=1804 audit(1567741404.094:244): pid=31687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/420/file0/file0" dev="loop2" ino=1115 res=1 [ 549.153286][ T26] audit: type=1804 audit(1567741404.134:245): pid=31689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/420/file0/file0" dev="loop2" ino=1115 res=1 03:43:24 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xc01000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:24 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x4000, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:24 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={r6, 0xd2, "d27019291e6bcaa98624658eec54b7ff5c187bd0a13bc5508821180cdc66c7ec5bd89a2ee7b1d6cd3d428b9d3e3eacd3a55987c9ee2987d288e746c151a07d2530b6d996c2750a2d1d9785438fd43e0e225ca5e48e8d2dbd1723d13074245c47cd25a4b337952aa136b0bab58bb66d57a42f24cfa485c3a2382e455b6fd95f039db8336ab6284b47d038a64311bf7f73765c500071468addd6a5c6f914a912ed19916da9d407082909d4dd883f640dc1a4730e1348fe13fc9d968ca9f51ef142b5dd0f5522933d383b697ebdaf8c3a3c9f5e"}, &(0x7f0000000340)=0xda) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 549.462995][T31655] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 549.525049][T31655] FAT-fs (loop4): Filesystem has been set read-only [ 549.606166][ T26] audit: type=1804 audit(1567741404.714:246): pid=31708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/470/file0/file0" dev="loop4" ino=1116 res=1 [ 549.615566][T31710] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 03:43:24 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) fcntl$addseals(r3, 0x409, 0x8) 03:43:25 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000580)="eb3c906d6b66db100e8f6a3e91c4ea45732e666174000204010002000270fff854c6ea92d46ae47a25697f769f23052059035c8d9dad72824802b66dbb2e5cbb1d8b8fbea3c558920d16bbdf0b613ee13d52fc7a16e4046ce28d3820cd23d122219ae60cc6820e37c6c305f880fda2", 0x6f}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x4, &(0x7f00000001c0)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000400)={r3, 0x5, &(0x7f0000000280)=[0x5, 0x9, 0x80000000, 0x7, 0x8001], &(0x7f0000000340)=[0x3], 0x13, 0x2, 0xc18, &(0x7f0000000380)=[0x401, 0xfffffffffffffff8], &(0x7f00000003c0)=[0x0, 0xe83, 0x7ff, 0x7, 0x7fffffff, 0x3d]}) 03:43:25 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$setlease(r1, 0x400, 0x3) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r3, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:25 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000640)="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", 0x1000) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 550.141872][T31771] FAT-fs (loop4): invalid media value (0x00) [ 550.176883][T31771] FAT-fs (loop4): Can't find a valid FAT filesystem 03:43:25 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 550.446655][T10317] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 550.507327][T10317] FAT-fs (loop0): Filesystem has been set read-only [ 550.822339][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 550.822352][ T26] audit: type=1804 audit(1567741405.934:250): pid=31785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/421/file0/file0" dev="loop2" ino=1123 res=1 03:43:26 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x3, 0x3, 0x6d5e, 0x1, 0x1}}) r1 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0xb768, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000540)={r4, 0xffff}, &(0x7f0000000580)=0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000001c0)=0xc5d, 0x4) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r6, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r7 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f0000000340)="1b877e6a5485d095eda7022789dfc13863bbaac51be8f25c1ab16b4b5eef45c83069fb9d8634f155b79c87e89f71da24fea3b36b4b1d2ca9d11cf5b605a492f7cd46f14e8c2563413485459dda6b99f4c653caa4e5750e4fa2d2e42efa96f331d40b8233dcfd99c9811930a28af5729ef938d6f17d1624aeaedae2499ccef5596854fa58f604d183a56be764e3271c2013997c8607fbde0a6c31698b843dbcd795951ac6187a7a8881997b3f57fd2a3e6fd9b4f22f3927ec8bf09e650ea58b68d47762b0", 0xc4, r7) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file1\x00', 0x20000000000008, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r0, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) recvmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000240)=@rc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, &(0x7f0000000480)=""/107, 0x6b}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f00000001c0)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:26 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x51}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa23a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 550.917588][ T26] audit: type=1804 audit(1567741405.934:251): pid=31787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/421/file0/file0" dev="loop2" ino=1123 res=1 03:43:26 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x3300000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:26 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="37f1d7bb9a72dab4a45c01d5611a746c1d5519f42c1993f5f0e8d6a1fb18d8a2d5e28de9b0d115cc357ba837f1f189b4105f5ac78913356f24c68f133562b1a7acf5c033d34eb695c7759d7886155e65c8f0ed0667f2225ef2ea71df24aa5c008025e2bad5bcace19f0da21356a23a468ad6d06c30f148c1cb930e2f5273ee239c0682f7679ecf3d508b3027baf225a06f32fb7b3168216f8e4b7ac4771bef59d4b69874158835689dccc2d451c505a778dda69c42dc694b322fa587a981", 0xbe, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r2) keyctl$setperm(0x5, r2, 0x10000000) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:26 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000240)={0x0, 0x1}, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x7d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000001c0)={r6, 0x8}, 0x8) 03:43:26 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1}, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:26 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000200)={0x5, 'syz1\x00'}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) read$eventfd(r3, &(0x7f00000001c0), 0x8) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 03:43:26 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x4000000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:26 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$FUSE_GETXATTR(r2, &(0x7f0000000140)={0x18, 0x0, 0x3, {0x3}}, 0x18) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:26 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x10', 0x0, &(0x7f0000000400)="b7acfc6951ac6247fdc02f98806348ea1262d250f0eec98b3e2af7a19b231d7ebf7f84dc1213f1f6a1d160abd89bc04575b369ea46399b5ab95c48ff870719256dbbc7abd49a87987ffaada736d24bf499b25a887e0c9156c745c0e7f9a4490ceb5f78077c3da542b69a3a0065ddf5cea30f70d70218de312d98916bf3c92815e7cc4b72ecb68af01cc56a8b9450cfb9d70da9f3", 0x94, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000017c0)=0xe8) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0}, &(0x7f0000001900)=0xc) lstat(&(0x7f0000001940)='./file1\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x40, 0x5, &(0x7f0000001640)=[{&(0x7f0000000340)="c1c8eb6b6488f419c4044dcb1121c3869393c36bd7d44a08fce9f23d34bbadfc8ab1a6f649f8", 0x26, 0xffffffffffffffe1}, {&(0x7f0000000380)="870367e568284767f6a7153678819754fa12d20d8bb2", 0x16, 0x10001}, {&(0x7f0000000540)="00aa596ccbfc27d98f6326a2b7abcc0f988daf676d75058db889748f8365a57e50cf4e6d29b176f575c4e28ff885dd6cbcda8c32c7baa13b61007436cc35b0dcbe1dd7e714304bae1d24053f29b73737dced045839517d31b0c68adf6492a5a0996d6e3e54fd870f6b492fea3ad707210c86b6884b3b70f4d5e7daea216f364d9397126e69083f8e", 0x88, 0x7fffffff}, {&(0x7f0000000640)="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", 0x1000, 0x81}, {&(0x7f00000003c0)="2488fd4bf5bb390ab8d98d0a6982f6bce18e3b74dbff974843a06670c75832b351851ccfb047e132eab962e4cc8f1badb31999c975fc3c83", 0x38, 0x91c0}], 0x2000, &(0x7f0000001a00)={[{@fat=@uid={'uid', 0x3d, r4}}, {@fat=@flush='flush'}, {@nodots='nodots'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@uid_gt={'uid>', r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'user\x10'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '@vboxnet1\x95'}}, {@hash='hash'}, {@euid_eq={'euid', 0x3d, r7}}, {@fowner_lt={'fowner<', r8}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@pcr={'pcr', 0x3d, 0x8}}]}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) bind$x25(r3, &(0x7f00000001c0)={0x9, @remote={[], 0x2}}, 0x12) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:26 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x6, 0x1, 0xffff, 0x1f, 0x0, 0x20, 0x1000, 0x4, 0x101, 0x4, 0x100000000, 0x8, 0xcda, 0x2, 0x6de, 0xb2c, 0x3, 0x0, 0x1000, 0x80000001, 0x3, 0x1, 0x8, 0x0, 0xbe, 0x7, 0x401, 0x5, 0x9, 0x401, 0x0, 0x9, 0x44bf, 0xfffffffffffffffb, 0x1ff, 0x4, 0x0, 0x8d, 0xe, @perf_bp={&(0x7f00000001c0), 0x1}, 0x10220, 0xfffffffffffff408, 0x401, 0x6, 0x1ff, 0xfff, 0xffff}, r2, 0x1, r1, 0x6) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:26 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) chmod(&(0x7f00000001c0)='./file1\x00', 0x192) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:26 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000001c0)={0x7ce2}, 0x4) creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:27 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x8004000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) renameat(r0, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00') fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@local, @remote}, &(0x7f0000000240)=0xc) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:27 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x143f80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x0, 0x100010, r2, 0x10000000) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x400000007, 0x0) socket(0x0, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:27 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:27 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup3(0xffffffffffffffff, r2, 0x100000) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000003c0)={0x2, 0x80, {0x52, 0x8000, 0x2, {0x5, 0xffff}, {0x8000000, 0xffffffffffff7fff}, @period={0x58, 0x3, 0x2b, 0x14000, 0x3f, {0x8, 0x200, 0x100000000, 0x3fffc00000}, 0x0, &(0x7f0000000340)}}, {0x6, 0x80000000, 0x7d, {0x401, 0x7}, {0x9, 0x7fff}, @period={0x5b, 0x5, 0x7, 0xfffffffffffff801, 0x9, {0x8, 0x1, 0x7fffffff, 0x8a4}, 0x2, &(0x7f0000000380)=[0x4, 0x8]}}}) lchown(&(0x7f00000001c0)='./file1\x00', r3, 0xee00) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x200, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:27 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xfeffffff00000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:27 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000240)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, @perf_config_ext={0x83, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x1, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:28 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x2d17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x210000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x1000, 0x0) write$cgroup_type(r2, &(0x7f0000000240)='threaded\x00', 0x9) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 553.177740][T10320] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 553.256935][T10320] FAT-fs (loop1): Filesystem has been set read-only 03:43:28 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x708c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000200)={0x1, [0x6]}, 0x6) open(&(0x7f0000000240)='./file1\x00', 0xa000, 0xd) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x20, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8852}, 0x10048010) 03:43:28 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={r2, 0x3ff, 0x5, [0x8, 0x4, 0x3, 0x80, 0xffffffff80000001]}, &(0x7f0000000340)=0x12) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r4, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) 03:43:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TCSBRKP(r0, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280)) r4 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$FUSE_GETXATTR(r5, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x7, {0x2}}, 0x18) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xb24) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 553.577744][ T26] audit: type=1804 audit(1567741408.674:252): pid=32028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir228789821/syzkaller.CPlPQ9/524/file0/file1" dev="sda1" ino=16734 res=1 03:43:28 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="b082e5e8761024fa45b775bc0a26ab79eaa191bfba77270447662ce8b0b14e0a5ee5da632c7fcffff5dcd9c9ad6c485d891c9ab291cf831a8fa4af6b961efd08874c9a294008784e83e9139a58c40a964f8f6dd25f58cada42f9a650bba1677dea7d59739e4520266d16b06eadfa07cde65ba1689834950207002111818d7ddb03b998a37b534beaaf03d186ba75ab4c6ab27620525e54d6e7cd4503efcb4edf33185a60304a8b7bb34a14877d8152b96577741487e041b890a4aa10f12ebdbd1f8d8365a57e2c738f", 0xc9}, {&(0x7f0000001780)="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", 0x34f}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000540)="7292be8092b9fca9e4d38e4649c89d5131e8dedf1e79c607693e1bca6577166eaa2906412a854b08fe930acfcaa0edbfbbfb2eacf88eba8232f3724600dbab98872f5e2cab7f413a057b7828e6b84d7e2d7c4e0bfab26b679be22404c7c1", 0x5e}], 0x4, &(0x7f00000018c0)=[@iv={0xd0, 0x117, 0x2, 0xb7, "65d2bdedac7a6371f0592b117e3f679ae0e5ab488046e5b840ed9fdb44585d9a6bf1b2818faaac64f1b585a55d33bed86358a024d6387de398522fb3fb81163e7a0edbc26c3addb6b6bd39dd42ae0b2177b69bec19b1c95578ad1acd7b5bc9fbd33432adbd4295bf994913bc684de4f684d1d79dec2938dc080311d4085aea4ffcb2dd9d7da377d4d81933e6668890c43e30825318edc389bd2961eea08aec3dab94802365f0aafe0b9b44ed5b7efde3886cd067c16977"}], 0xd0, 0x4000}, 0x40) socket$kcm(0x29, 0x5, 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r3) keyctl$link(0x8, 0x0, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000340)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 553.693654][ T26] audit: type=1804 audit(1567741408.754:253): pid=32028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir228789821/syzkaller.CPlPQ9/524/file0/file1" dev="sda1" ino=16734 res=1 [ 553.854458][ T26] audit: type=1804 audit(1567741408.954:254): pid=32017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/425/file0/file0" dev="loop2" ino=1127 res=1 [ 553.890431][ T26] audit: type=1804 audit(1567741408.954:255): pid=32023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir449026366/syzkaller.q4etfn/425/file0/file0" dev="loop2" ino=1127 res=1 03:43:29 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0xff00000000000000) r2 = add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000640), 0x0, r2) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:29 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{0x0, 0x7530}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000280)={0x3, r2}) socket(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:43:29 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000400)={0xb0e, 0x7, [0x9, 0xffffffff, 0xb4, 0x10001, 0x6], 0x1}) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000380)="eb3c906d6b6673010000800002f800000000000000004426edd61a3e740224d41c365a669d339ef199fe8a703185f88b2a1fd479f0481ec483c33a7888a8332142c9f063692f0b8dfbf3990bfc0cee436cb729792700cfcf8ddff0738dc40c65067f07a7b56f0d236397", 0x6a, 0x8}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x361041bf558e3ab6, &(0x7f0000000280)=ANY=[@ANYBLOB='metacopy=on:fowner=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) fallocate(r2, 0x1, 0x0, 0x369e5d84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffff9b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='id\x8f\x00') syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000001c0), 0x0, r6) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 554.087961][ T26] audit: type=1804 audit(1567741409.004:256): pid=32044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/509/file0/file0" dev="loop0" ino=1129 res=1 [ 554.169436][ T26] audit: type=1804 audit(1567741409.004:257): pid=32047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722948462/syzkaller.PiDqAC/509/file0/file0" dev="loop0" ino=1129 res=1 03:43:29 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fallocate(r1, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x49, 0x1, {0x2, 0x3, 0x6d5f, 0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000540)}}, 0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000440)=""/241, &(0x7f0000000100)=0xf1) getdents64(r2, &(0x7f0000000340)=""/232, 0xe8) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x5dd8a814d78739d1) sysfs$3(0x3) syz_open_dev$video4linux(0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x8cc, 0x0) [ 554.214357][ T26] audit: type=1804 audit(1567741409.034:258): pid=32032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir802636906/syzkaller.Irx8Sq/477/file0/file0" dev="sda1" ino=16695 res=1 [ 554.425449][T32062] FAT-fs (loop3): bogus number of FAT structure [ 554.467534][T32062] FAT-fs (loop3): Can't find a valid FAT filesystem [ 554.532449][ T26] audit: type=1804 audit(1567741409.644:259): pid=32057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir054760431/syzkaller.fTh9zM/480/file0/file0" dev="loop1" ino=1131 res=1 [ 554.607411][T32083] WARNING: CPU: 0 PID: 32083 at mm/filemap.c:220 unaccount_page_cache_page+0x65b/0xda0 [ 554.617065][T32083] Kernel panic - not syncing: panic_on_warn set ... [ 554.623656][T32083] CPU: 0 PID: 32083 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 554.631541][T32083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.641589][T32083] Call Trace: [ 554.644881][T32083] dump_stack+0x172/0x1f0 [ 554.649221][T32083] ? unaccount_page_cache_page+0x620/0xda0 [ 554.655037][T32083] panic+0x2dc/0x755 [ 554.659044][T32083] ? add_taint.cold+0x16/0x16 [ 554.663724][T32083] ? __kasan_check_write+0x14/0x20 [ 554.668835][T32083] ? __warn.cold+0x5/0x4c [ 554.673169][T32083] ? unaccount_page_cache_page+0x65b/0xda0 [ 554.678974][T32083] __warn.cold+0x20/0x4c [ 554.683221][T32083] ? unaccount_page_cache_page+0x65b/0xda0 [ 554.689088][T32083] report_bug+0x263/0x2b0 [ 554.693422][T32083] do_error_trap+0x11b/0x200 [ 554.698017][T32083] do_invalid_op+0x37/0x50 [ 554.702438][T32083] ? unaccount_page_cache_page+0x65b/0xda0 [ 554.708240][T32083] invalid_op+0x23/0x30 [ 554.712394][T32083] RIP: 0010:unaccount_page_cache_page+0x65b/0xda0 [ 554.718805][T32083] Code: 00 0f 85 be 06 00 00 49 8b 5d 00 31 ff 48 c1 eb 03 83 e3 01 48 89 de e8 c3 25 e4 ff 48 85 db 0f 84 c0 fb ff ff e8 15 24 e4 ff <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 48 c1 ea 03 80 3c [ 554.720916][ T3906] kobject: 'loop4' (0000000014d501fa): kobject_uevent_env [ 554.738401][T32083] RSP: 0018:ffff88808e80f9b8 EFLAGS: 00010016 [ 554.738413][T32083] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc900087a3000 [ 554.738421][T32083] RDX: 0000000000002af6 RSI: ffffffff818e513b RDI: 0000000000000007 [ 554.738429][T32083] RBP: ffff88808e80f9f8 R08: ffff888099874480 R09: fffff94000433da9 [ 554.738437][T32083] R10: fffff94000433da8 R11: ffffea000219ed47 R12: ffffea000219ed40 [ 554.738446][T32083] R13: ffffea000219ed40 R14: ffffea000219ed40 R15: ffffea0001ad7588 [ 554.738472][T32083] ? unaccount_page_cache_page+0x65b/0xda0 [ 554.738493][T32083] ? unaccount_page_cache_page+0x65b/0xda0 [ 554.802997][T32083] delete_from_page_cache_batch+0x1e9/0x1170 [ 554.808981][T32083] ? blkdev_releasepage+0x104/0x150 [ 554.814176][T32083] ? blkdev_iopoll+0x160/0x160 [ 554.818949][T32083] ? delete_from_page_cache+0x270/0x270 [ 554.824496][T32083] ? block_invalidatepage+0x462/0x650 [ 554.829869][T32083] ? __kasan_check_write+0x14/0x20 [ 554.834986][T32083] truncate_inode_pages_range+0x622/0x1740 [ 554.838179][ T3906] kobject: 'loop4' (0000000014d501fa): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 554.840794][T32083] ? generic_error_remove_page+0xc0/0xc0 [ 554.840810][T32083] ? perf_trace_lock+0xeb/0x4c0 [ 554.840828][T32083] ? perf_trace_lock+0xeb/0x4c0 [ 554.840848][T32083] ? lock_downgrade+0x920/0x920 [ 554.871083][T32083] ? do_raw_spin_unlock+0x57/0x270 [ 554.876209][T32083] ? lock_downgrade+0x920/0x920 [ 554.881066][T32083] ? cpu_set_state_online+0x49/0x60 [ 554.886266][T32083] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 554.892501][T32083] ? __inode_security_revalidate+0xf7/0x150 [ 554.898388][T32083] ? avc_policy_seqno+0xd/0x70 [ 554.903152][T32083] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 554.908874][T32083] ? selinux_file_permission+0x9b/0x570 [ 554.914421][T32083] blkdev_fallocate+0x23a/0x410 [ 554.919275][T32083] ? blkdev_read_iter+0x190/0x190 [ 554.924298][T32083] vfs_fallocate+0x4aa/0xa50 [ 554.928899][T32083] ksys_fallocate+0x58/0xa0 [ 554.933403][T32083] __x64_sys_fallocate+0x97/0xf0 [ 554.938338][T32083] do_syscall_64+0xfd/0x6a0 [ 554.942847][T32083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 554.948735][T32083] RIP: 0033:0x459879 [ 554.952626][T32083] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 554.972227][T32083] RSP: 002b:00007fe7a627ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 554.980635][T32083] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459879 [ 554.988695][T32083] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 554.996669][T32083] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 555.004636][T32083] R10: 00000000369e5d84 R11: 0000000000000246 R12: 00007fe7a627f6d4 [ 555.012606][T32083] R13: 00000000004bffbd R14: 00000000004d1fc0 R15: 00000000ffffffff [ 555.021863][T32083] Kernel Offset: disabled [ 555.026189][T32083] Rebooting in 86400 seconds..