[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 27.986543] kauditd_printk_skb: 7 callbacks suppressed [ 27.986571] audit: type=1800 audit(1543748013.211:29): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.019481] audit: type=1800 audit(1543748013.211:30): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts. 2018/12/02 10:53:42 fuzzer started 2018/12/02 10:53:45 dialing manager at 10.128.0.26:33419 2018/12/02 10:53:48 syscalls: 1 2018/12/02 10:53:48 code coverage: enabled 2018/12/02 10:53:48 comparison tracing: enabled 2018/12/02 10:53:48 setuid sandbox: enabled 2018/12/02 10:53:48 namespace sandbox: enabled 2018/12/02 10:53:48 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/02 10:53:48 fault injection: enabled 2018/12/02 10:53:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/02 10:53:48 net packet injection: enabled 2018/12/02 10:53:48 net device setup: enabled 10:54:53 executing program 0: timer_create(0x601d2ceefb6bab32, &(0x7f0000001400)={0x0, 0x1d}, &(0x7f0000001440)) syzkaller login: [ 108.275300] IPVS: ftp: loaded support on port[0] = 21 10:54:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 108.490540] IPVS: ftp: loaded support on port[0] = 21 10:54:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x4002}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) close(r2) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000340)="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") [ 108.859746] IPVS: ftp: loaded support on port[0] = 21 10:54:54 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6000, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000040)) [ 109.281902] IPVS: ftp: loaded support on port[0] = 21 10:54:54 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0x80885659, 0x0) [ 109.685471] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.695282] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.712730] device bridge_slave_0 entered promiscuous mode [ 109.833236] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.839704] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.873829] device bridge_slave_1 entered promiscuous mode [ 109.955252] IPVS: ftp: loaded support on port[0] = 21 [ 110.017998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 110.164098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 10:54:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bcsf0\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) [ 110.433893] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.440361] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.456621] device bridge_slave_0 entered promiscuous mode [ 110.503935] IPVS: ftp: loaded support on port[0] = 21 [ 110.621746] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 110.652578] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.658971] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.682541] device bridge_slave_1 entered promiscuous mode [ 110.749678] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 110.854241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 110.971290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.003840] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.012245] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.019675] device bridge_slave_0 entered promiscuous mode [ 111.178657] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.194294] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.201817] device bridge_slave_1 entered promiscuous mode [ 111.339360] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.357110] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 111.372091] team0: Port device team_slave_0 added [ 111.380123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.494571] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.562973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 111.570310] team0: Port device team_slave_1 added [ 111.623723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 111.651768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 111.659804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.685168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 111.697771] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.711949] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.731441] device bridge_slave_0 entered promiscuous mode [ 111.749589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.766016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.816897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.909596] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.936527] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.953026] device bridge_slave_1 entered promiscuous mode [ 111.965910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 112.019967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.029109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.070378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 112.100096] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.113723] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.121164] device bridge_slave_0 entered promiscuous mode [ 112.132533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 112.141184] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.170343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.179804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.229410] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.239369] team0: Port device team_slave_0 added [ 112.248323] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.267253] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.282963] device bridge_slave_1 entered promiscuous mode [ 112.302656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 112.323385] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.366511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 112.386777] team0: Port device team_slave_1 added [ 112.444930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 112.459484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 112.491702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.510260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.530295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.562309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.606272] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 112.613588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.633376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 112.660485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.695981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.712102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.757025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.823489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 112.858473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.880828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.906689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.918973] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.927310] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.934742] device bridge_slave_0 entered promiscuous mode [ 112.946919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 112.968794] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 112.984357] team0: Port device team_slave_0 added [ 112.990687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.009935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.058073] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.091428] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.107928] device bridge_slave_1 entered promiscuous mode [ 113.133373] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 113.142370] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 113.149786] team0: Port device team_slave_1 added [ 113.214170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 113.241829] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 113.292715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 113.299618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.312130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.335803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.379985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 113.412744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.423960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 113.431589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.451706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.502457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 113.509582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.522185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.594721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 113.618020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.657653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 113.669983] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 113.687648] team0: Port device team_slave_0 added [ 113.710321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.719784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.744433] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.750900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.757968] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.764369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.774842] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 113.803091] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 113.829966] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 113.853213] team0: Port device team_slave_1 added [ 113.958562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 114.000434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.070596] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 114.079963] team0: Port device team_slave_0 added [ 114.125868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.208804] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 114.222004] team0: Port device team_slave_1 added [ 114.230235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 114.245542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.272269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.291971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.317609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 114.341521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.374844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.419361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 114.433149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.441123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.472803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 114.486677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.496025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.535993] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.542420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.549070] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.555529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.563544] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 114.596645] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 114.615960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.632012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.708359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 114.721695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.729673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.770941] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 114.803058] team0: Port device team_slave_0 added [ 114.934148] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 114.949491] team0: Port device team_slave_1 added [ 115.093981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.192963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.216562] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.222987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.229650] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.236069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.262319] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 115.312375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 115.319581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.332762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.360571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.369868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.402045] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 115.418665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.442578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.931276] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.937709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.944415] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.950780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.975560] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 116.179979] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.186413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.193118] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.199504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.219625] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 116.321827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.329069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.855881] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.862318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.868988] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.875407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.887588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 117.352160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.096428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.662513] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.775470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.156737] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 120.178549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.194800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.262596] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 120.513992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.648990] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.733593] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 120.739834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.762345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.992578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.052557] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 121.233385] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.404814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.478350] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 121.502245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.521839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.553332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 121.689845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.932070] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 121.983305] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.053479] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 122.059618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.083249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.202070] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 122.396375] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 122.411749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.418893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.587054] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.692246] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 122.698485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.718496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.959945] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.198381] 8021q: adding VLAN 0 to HW filter on device team0 10:55:08 executing program 0: timer_create(0x601d2ceefb6bab32, &(0x7f0000001400)={0x0, 0x1d}, &(0x7f0000001440)) 10:55:08 executing program 0: timer_create(0x601d2ceefb6bab32, &(0x7f0000001400)={0x0, 0x1d}, &(0x7f0000001440)) 10:55:09 executing program 0: timer_create(0x601d2ceefb6bab32, &(0x7f0000001400)={0x0, 0x1d}, &(0x7f0000001440)) 10:55:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) [ 123.995382] hrtimer: interrupt took 41756 ns [ 124.402014] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:55:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 10:55:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 10:55:10 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x0, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) r2 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r3, 0x40, 0x44, 0x81000f3) getsockname(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) [ 125.691237] overlayfs: failed to resolve './file1': -2 10:55:10 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6000, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000040)) [ 125.724179] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 10:55:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x2, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 125.871778] syz-executor0 (7465) used greatest stack depth: 10872 bytes left 10:55:11 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6000, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000040)) [ 126.121140] overlayfs: failed to resolve './file1': -2 [ 126.160895] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 10:55:12 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0x80885659, 0x0) 10:55:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) 10:55:12 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6000, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000040)) 10:55:12 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x0, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) r2 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r3, 0x40, 0x44, 0x81000f3) getsockname(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) 10:55:12 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x0, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) r2 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r3, 0x40, 0x44, 0x81000f3) getsockname(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) 10:55:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bcsf0\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 10:55:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) 10:55:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bcsf0\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) [ 127.501474] overlayfs: failed to resolve './file1': -2 [ 127.550218] overlayfs: failed to resolve './file1': -2 [ 127.616223] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 127.623954] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 10:55:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bcsf0\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 10:55:12 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x0, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) r2 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r3, 0x40, 0x44, 0x81000f3) getsockname(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) 10:55:13 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) [ 127.953472] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 10:55:13 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0x80885659, 0x0) 10:55:13 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x0, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) r2 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r3, 0x40, 0x44, 0x81000f3) getsockname(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) 10:55:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) 10:55:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) [ 128.474744] overlayfs: failed to resolve './file1': -2 [ 128.527205] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 10:55:13 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x0, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) r2 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r3, 0x40, 0x44, 0x81000f3) getsockname(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) 10:55:14 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) 10:55:14 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x0, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) r2 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0), 0x0, 0x6}], 0x0, &(0x7f0000000b40)) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r3, 0x40, 0x44, 0x81000f3) getsockname(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) [ 128.953133] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 10:55:14 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r0, 0x80885659, 0x0) 10:55:14 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x18}}, &(0x7f0000002380)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 10:55:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) 10:55:14 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x18}}, &(0x7f0000002380)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 10:55:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) 10:55:14 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x18}}, &(0x7f0000002380)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) [ 129.550705] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 10:55:14 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x18}}, &(0x7f0000002380)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 10:55:14 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x49) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 10:55:15 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100), 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="106aa6d40bd3fc84450cdc3bd51f793fb4c033087a4c2b5f2373985b7891da77cc0ca31b4278f84e87711d7bf184ba2cf81070387bef791f9d0abe593098d41e18290a1278c15cf64e8d7faecbde5d637bf73aeb0f2ce8182645e3f359d967f54ec340f25b416c028e1a86cdb284726647577bec2f229d8c0420054a30564314c627ace2293a12fbced65fa86c996781426e99f9b5e8fa76ceda69a392357b7bb2efee1d4522c87027b15de1eaaa7396713ca27d3a0dacd1c1f3f67f8a6af9f944", 0xc1, 0xfffffffffffffffd) r5 = request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x10000000000008, r5) 10:55:15 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 10:55:15 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x49) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 10:55:15 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x80) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x3, @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], 0x10) 10:55:15 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x49) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 10:55:15 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x49) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000060002000009a979a121b80c7bc8790405c7dcd62e0a53b232394938d36d0ef5ffa8ffffffff819a2b0a6606e43a620170a00021f069ca021f6f65dcf360e7e58f358c00f9ecff0158d19bcb2a5130fffffffffffff300b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151cb184a"}, 0x80) 10:55:15 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x80) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x3, @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], 0x10) 10:55:15 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x80) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x3, @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], 0x10) 10:55:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:16 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 10:55:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)={0x77359400}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x16) [ 131.026635] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 10:55:16 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x80) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x3, @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], 0x10) 10:55:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)={0x77359400}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x16) 10:55:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)={0x77359400}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x16) 10:55:17 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 10:55:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x1, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)={0x77359400}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x16) 10:55:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:18 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 10:55:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:19 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) [ 145.357990] attempt to access beyond end of device [ 145.421512] loop0: rw=1048577, want=6297, limit=112 10:55:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) [ 145.518737] attempt to access beyond end of device [ 145.525442] attempt to access beyond end of device [ 145.530387] loop3: rw=1048577, want=130, limit=112 [ 145.547543] attempt to access beyond end of device [ 145.547593] attempt to access beyond end of device [ 145.552533] loop0: rw=1048577, want=10393, limit=112 [ 145.562368] attempt to access beyond end of device [ 145.567655] loop0: rw=1048577, want=14489, limit=112 [ 145.587883] loop4: rw=1048577, want=130, limit=112 [ 145.612583] attempt to access beyond end of device [ 145.617545] loop0: rw=1048577, want=18585, limit=112 [ 145.631035] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 145.639915] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 145.731496] loop2: rw=1048577, want=130, limit=112 [ 145.756892] attempt to access beyond end of device [ 145.768520] attempt to access beyond end of device 10:55:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) [ 145.824129] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 145.856151] loop3: rw=1048577, want=131, limit=112 10:55:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) [ 145.871599] loop4: rw=1048577, want=131, limit=112 [ 145.923627] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 145.932744] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 145.943060] attempt to access beyond end of device [ 145.957134] attempt to access beyond end of device [ 145.981699] loop2: rw=1048577, want=131, limit=112 10:55:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) [ 146.013316] attempt to access beyond end of device [ 146.018676] loop4: rw=1048577, want=132, limit=112 [ 146.036974] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 146.060328] loop0: rw=1048577, want=22681, limit=112 [ 146.066842] attempt to access beyond end of device [ 146.083850] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 146.094166] attempt to access beyond end of device [ 146.106426] loop3: rw=1048577, want=132, limit=112 [ 146.329524] loop4: rw=1048577, want=133, limit=112 [ 146.346370] Buffer I/O error on dev loop3, logical block 131, lost async page write 10:55:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) [ 146.454216] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 146.539830] attempt to access beyond end of device [ 146.568627] attempt to access beyond end of device [ 146.579653] attempt to access beyond end of device [ 146.620211] loop0: rw=1, want=22689, limit=112 [ 146.625331] attempt to access beyond end of device [ 146.630278] loop4: rw=1048577, want=142, limit=112 [ 146.737760] loop3: rw=1048577, want=133, limit=112 [ 146.756325] loop2: rw=1048577, want=132, limit=112 [ 146.821610] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 146.850901] attempt to access beyond end of device [ 146.877578] attempt to access beyond end of device [ 148.094172] loop2: rw=1048577, want=133, limit=112 [ 148.099183] attempt to access beyond end of device [ 148.108506] attempt to access beyond end of device [ 148.116095] loop4: rw=1048577, want=143, limit=112 [ 148.121069] attempt to access beyond end of device [ 148.126109] loop3: rw=1048577, want=142, limit=112 [ 148.131087] attempt to access beyond end of device [ 148.141401] loop2: rw=1048577, want=142, limit=112 [ 148.146367] attempt to access beyond end of device [ 148.151307] loop2: rw=1048577, want=143, limit=112 [ 148.251611] loop4: rw=1048577, want=144, limit=112 [ 148.268606] attempt to access beyond end of device [ 148.288451] loop3: rw=1048577, want=143, limit=112 [ 148.381434] attempt to access beyond end of device [ 148.386406] loop2: rw=1048577, want=144, limit=112 [ 148.405144] attempt to access beyond end of device [ 148.410095] loop3: rw=1048577, want=144, limit=112 [ 148.415457] loop4: rw=1048577, want=145, limit=112 [ 148.423523] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 148.431601] FAT-fs (loop4): Filesystem has been set read-only [ 148.496045] attempt to access beyond end of device [ 148.518477] attempt to access beyond end of device [ 148.536071] loop2: rw=1048577, want=145, limit=112 [ 148.541490] loop3: rw=1048577, want=145, limit=112 [ 148.541992] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 148.554385] FAT-fs (loop2): Filesystem has been set read-only [ 148.570517] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 148.578545] FAT-fs (loop3): Filesystem has been set read-only 10:55:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) 10:55:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x8, 0x3, 0xb3, 0x1, 0x4, 0x89}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) r5 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r3, r5, 0x0, 0x8000fffffffe) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4c54}) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) [ 149.235989] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:55:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) 10:55:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) sendmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:55:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) 10:55:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='+4', 0x2}], 0x1) 10:55:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x200000007ff, &(0x7f0000000340)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000580)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x7, 0x0, 0x2, r2}, &(0x7f00000000c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r7 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000000500)={0x1}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r11 = dup2(r9, r10) fdatasync(r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_dccp_buf(r11, 0x21, 0xc0, &(0x7f0000000240), 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x2, &(0x7f0000961000/0x2000)=nil, 0x6}) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000e40000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x0, 0x0, &(0x7f0000000200), 0x0) 10:55:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000100)="0a5c2d0240316285717070") r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x351, 0x0, 0x0, 0x0, 0x0, 0x0, "333a7967226dc88cdd4b3fe9a3d3d456462a30a2d7e524ec38477a4fd78e0c5aff782ce7e5d25783c021732af457bd8d030d2129837228028db6e68ed0ed71c9", "ee369ac65b7c48a0f85e4c14f0c99087b233f43894215adbd9da650737f8eecd65ad73b661b8a4912d778a0d18167ec6764f75480ba544786b77f6096483dfe7", "92e4c5a35314133e1368d102dce15ea4f4d39cb3644ebd0a0f807c17071cf095"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 10:55:35 executing program 4: r0 = socket$inet6(0xa, 0x200000000001, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0xfffffefffffffffe, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 10:55:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040)=0x2f2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) sendto(r1, &(0x7f00000003c0), 0xffffffffffffff6c, 0x0, &(0x7f0000000340)=@un=@file={0x0, './file0\x00'}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/124, 0xffffffd6, 0x0, &(0x7f0000001680)=@nfc, 0x93019b) 10:55:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x8, 0x3, 0xb3, 0x1, 0x4, 0x89}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) r5 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r3, r5, 0x0, 0x8000fffffffe) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4c54}) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) 10:55:35 executing program 4: r0 = socket$inet6(0xa, 0x200000000001, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0xfffffefffffffffe, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 10:55:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000100)="0a5c2d0240316285717070") r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x351, 0x0, 0x0, 0x0, 0x0, 0x0, "333a7967226dc88cdd4b3fe9a3d3d456462a30a2d7e524ec38477a4fd78e0c5aff782ce7e5d25783c021732af457bd8d030d2129837228028db6e68ed0ed71c9", "ee369ac65b7c48a0f85e4c14f0c99087b233f43894215adbd9da650737f8eecd65ad73b661b8a4912d778a0d18167ec6764f75480ba544786b77f6096483dfe7", "92e4c5a35314133e1368d102dce15ea4f4d39cb3644ebd0a0f807c17071cf095"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 10:55:35 executing program 4: r0 = socket$inet6(0xa, 0x200000000001, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0xfffffefffffffffe, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) [ 150.737203] attempt to access beyond end of device [ 150.742491] loop5: rw=1048577, want=130, limit=112 [ 150.747954] buffer_io_error: 14 callbacks suppressed [ 150.747965] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 150.764278] attempt to access beyond end of device [ 150.769982] loop5: rw=1048577, want=131, limit=112 [ 150.778206] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 150.787435] attempt to access beyond end of device [ 150.797042] loop5: rw=1048577, want=132, limit=112 [ 150.803154] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 150.814185] attempt to access beyond end of device [ 150.819874] loop5: rw=1048577, want=133, limit=112 [ 150.825801] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 150.837066] attempt to access beyond end of device [ 150.843148] loop5: rw=1048577, want=142, limit=112 [ 150.851689] Buffer I/O error on dev loop5, logical block 141, lost async page write [ 150.864406] attempt to access beyond end of device [ 150.870255] loop5: rw=1048577, want=143, limit=112 [ 150.876137] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 150.886906] attempt to access beyond end of device [ 150.893004] loop5: rw=1048577, want=144, limit=112 [ 150.900757] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 150.909940] attempt to access beyond end of device [ 150.918108] loop5: rw=1048577, want=145, limit=112 [ 150.924176] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 150.936603] attempt to access beyond end of device [ 150.942651] loop5: rw=1048577, want=153, limit=112 [ 150.950431] attempt to access beyond end of device [ 150.963678] loop5: rw=1048577, want=182, limit=112 [ 150.969334] Buffer I/O error on dev loop5, logical block 181, lost async page write [ 150.980292] attempt to access beyond end of device [ 150.986267] loop5: rw=1048577, want=183, limit=112 [ 151.016467] Buffer I/O error on dev loop5, logical block 182, lost async page write [ 151.050501] attempt to access beyond end of device [ 151.089305] loop5: rw=1048577, want=184, limit=112 [ 151.112380] attempt to access beyond end of device [ 151.127437] loop5: rw=1048577, want=185, limit=112 [ 151.139267] attempt to access beyond end of device [ 151.151598] loop5: rw=1048577, want=206, limit=112 [ 151.159921] attempt to access beyond end of device [ 151.178364] loop5: rw=1048577, want=207, limit=112 [ 151.190524] attempt to access beyond end of device [ 151.201407] loop5: rw=1048577, want=208, limit=112 [ 151.206545] attempt to access beyond end of device [ 151.212011] loop5: rw=1048577, want=209, limit=112 [ 151.217178] attempt to access beyond end of device [ 151.222610] loop5: rw=1048577, want=258, limit=112 [ 151.227737] attempt to access beyond end of device [ 151.233464] loop5: rw=1048577, want=259, limit=112 [ 151.238690] attempt to access beyond end of device [ 151.244197] loop5: rw=1048577, want=260, limit=112 [ 151.249331] attempt to access beyond end of device [ 151.254797] loop5: rw=1048577, want=261, limit=112 [ 151.259948] attempt to access beyond end of device [ 151.265500] loop5: rw=1048577, want=270, limit=112 [ 151.270628] attempt to access beyond end of device [ 151.276151] loop5: rw=1048577, want=271, limit=112 [ 151.281275] attempt to access beyond end of device [ 151.286740] loop5: rw=1048577, want=272, limit=112 [ 151.292229] attempt to access beyond end of device [ 151.297354] loop5: rw=1048577, want=273, limit=112 [ 151.304678] attempt to access beyond end of device [ 151.309786] loop5: rw=1, want=1185, limit=112 [ 153.381373] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 156.391362] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 159.401367] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 162.411364] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 165.421372] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 168.431374] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 171.441383] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 174.451361] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 177.461409] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 180.471377] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 183.481371] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 186.491360] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 189.501373] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 192.511357] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 195.521366] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 198.531362] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 201.541367] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 204.551361] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 207.561374] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 210.571361] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 213.581378] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 216.591363] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 219.601384] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 222.611363] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 225.621364] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 228.631364] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 231.641357] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 234.651369] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 237.661354] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 240.671368] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 243.681361] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 246.691367] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 249.701354] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 252.711391] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 255.431328] rcu: INFO: rcu_preempt self-detected stall on CPU [ 255.437331] rcu: 1-....: (10500 ticks this GP) idle=6c2/1/0x4000000000000002 softirq=9186/9189 fqs=5249 [ 255.447216] rcu: (t=10502 jiffies g=10097 q=691) [ 255.452146] NMI backtrace for cpu 1 [ 255.455755] CPU: 1 PID: 8041 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 255.464227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.473576] Call Trace: [ 255.476154] [ 255.478351] dump_stack+0x244/0x39d [ 255.481990] ? dump_stack_print_info.cold.1+0x20/0x20 [ 255.487221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.492784] ? do_raw_spin_lock+0x14f/0x350 [ 255.497120] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 255.501835] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 255.507031] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 255.512311] arch_trigger_cpumask_backtrace+0x14/0x20 [ 255.517537] rcu_dump_cpu_stacks+0x16f/0x1bc [ 255.521954] print_cpu_stall.cold.70+0x218/0x40a [ 255.526747] ? trace_hardirqs_on+0x310/0x310 [ 255.531189] ? print_other_cpu_stall+0x160/0x160 [ 255.535952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.541494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.547038] ? do_trace_rcu_torture_read+0x10/0x10 [ 255.551996] ? __this_cpu_preempt_check+0x1c/0x20 [ 255.556846] ? rcu_preempt_need_deferred_qs+0x71/0x190 [ 255.562155] ? __lock_is_held+0xb5/0x140 [ 255.566220] ? __rcu_read_lock+0x90/0x90 [ 255.570280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.575822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.581362] ? check_preemption_disabled+0x48/0x280 [ 255.586383] rcu_check_callbacks+0xf3b/0x13f0 [ 255.590877] ? __lock_acquire+0x62f/0x4c20 [ 255.595122] ? rcutree_dead_cpu+0x10/0x10 [ 255.599282] ? mark_held_locks+0x130/0x130 [ 255.603522] ? graph_lock+0x270/0x270 [ 255.607319] ? mark_held_locks+0x130/0x130 [ 255.611552] ? __lock_acquire+0x62f/0x4c20 [ 255.615784] ? debug_smp_processor_id+0x1c/0x20 [ 255.620483] ? nohz_balance_exit_idle+0x65/0x3e0 [ 255.625240] ? print_usage_bug+0xc0/0xc0 [ 255.629306] ? graph_lock+0x270/0x270 [ 255.633106] ? find_held_lock+0x36/0x1c0 [ 255.637178] ? cpuacct_account_field+0x219/0x3d0 [ 255.641937] ? graph_lock+0x270/0x270 [ 255.645787] ? kasan_check_read+0x11/0x20 [ 255.649943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.655485] ? check_preemption_disabled+0x48/0x280 [ 255.660512] ? trace_hardirqs_off+0xb8/0x310 [ 255.664925] ? __lock_is_held+0xb5/0x140 [ 255.668991] ? trace_hardirqs_on+0x310/0x310 [ 255.673406] ? check_preemption_disabled+0x48/0x280 [ 255.678465] ? raise_softirq+0x199/0x430 [ 255.682535] ? raise_softirq_irqoff+0x2e0/0x2e0 [ 255.687223] ? account_system_index_time+0x333/0x5d0 [ 255.692332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.697869] ? check_preemption_disabled+0x48/0x280 [ 255.702908] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 255.708470] ? hrtimer_run_queues+0x9a/0x400 [ 255.712883] ? run_local_timers+0x19b/0x230 [ 255.717216] ? timer_clear_idle+0x90/0x90 [ 255.721368] ? irqtime_account_process_tick.isra.6+0x35b/0x490 [ 255.727344] ? account_process_tick+0x282/0x350 [ 255.732012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.737557] update_process_times+0x2d/0x70 [ 255.741914] tick_sched_handle+0x9f/0x180 [ 255.746072] tick_sched_timer+0x45/0x130 [ 255.750134] __hrtimer_run_queues+0x412/0x10c0 [ 255.754722] ? tick_sched_do_timer+0x1a0/0x1a0 [ 255.759308] ? hrtimer_start_range_ns+0xde0/0xde0 [ 255.764182] ? pvclock_read_flags+0x160/0x160 [ 255.768682] ? trace_hardirqs_on+0x310/0x310 [ 255.773096] ? kvm_clock_read+0x18/0x30 [ 255.777069] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 255.782088] ? ktime_get_update_offsets_now+0x3b3/0x540 [ 255.787462] ? do_timer+0x50/0x50 [ 255.790923] ? rwlock_bug.part.2+0x90/0x90 [ 255.795156] ? trace_hardirqs_on+0x310/0x310 [ 255.799562] ? rcu_softirq_qs+0x20/0x20 [ 255.803545] hrtimer_interrupt+0x313/0x780 [ 255.807806] smp_apic_timer_interrupt+0x1a1/0x760 [ 255.812647] ? smp_reschedule_interrupt+0x109/0x650 [ 255.817661] ? smp_call_function_single_interrupt+0x640/0x640 [ 255.823557] ? interrupt_entry+0xb5/0xc0 [ 255.827623] ? trace_hardirqs_off_caller+0xbb/0x300 [ 255.832635] ? trace_hardirqs_off_caller+0xbb/0x300 [ 255.837685] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.842529] ? trace_hardirqs_on_caller+0x310/0x310 [ 255.847541] ? trace_hardirqs_on_caller+0x310/0x310 [ 255.852558] ? task_prio+0x50/0x50 [ 255.856101] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 255.861642] ? check_preemption_disabled+0x48/0x280 [ 255.866662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.871512] apic_timer_interrupt+0xf/0x20 [ 255.875737] [ 255.877975] RIP: 0010:lock_is_held_type+0x18b/0x210 [ 255.882992] Code: ff df 41 c7 84 24 7c 08 00 00 00 00 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 75 63 48 83 3d ac 4e f1 07 00 74 30 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e8 5b 41 5c 41 5d 5d c3 48 83 c4 [ 255.901896] RSP: 0018:ffff88018fca65b8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 255.909607] RAX: dffffc0000000000 RBX: 0000000000000282 RCX: ffffc90005ded000 [ 255.916873] RDX: 1ffffffff12a3f76 RSI: 0000000000000000 RDI: 0000000000000282 [ 255.924163] RBP: ffff88018fca65d8 R08: ffff8801b8f14540 R09: ffffed0031f94ccb [ 255.931436] R10: ffffed0031f94ccb R11: 0000000000000003 R12: ffff8801b8f14540 [ 255.938706] R13: 0000000000000000 R14: ffffea00070a5380 R15: dffffc0000000000 [ 255.946039] find_get_entry+0xc7e/0x1120 [ 255.950115] ? filemap_map_pages+0x1a20/0x1a20 [ 255.954696] ? find_get_entry+0xa87/0x1120 [ 255.958932] ? lock_downgrade+0x900/0x900 [ 255.963081] ? check_preemption_disabled+0x48/0x280 [ 255.968099] ? kasan_check_read+0x11/0x20 [ 255.972251] ? rcu_read_unlock_special+0x370/0x370 [ 255.977190] ? find_get_entry+0xaae/0x1120 [ 255.981437] ? filemap_map_pages+0x1a20/0x1a20 [ 255.986040] ? mark_held_locks+0x130/0x130 [ 255.990282] ? _raw_spin_unlock_irq+0x27/0x80 [ 255.994776] ? _raw_spin_unlock_irq+0x27/0x80 [ 255.999273] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 256.003855] ? graph_lock+0x270/0x270 [ 256.007661] ? kasan_check_read+0x11/0x20 [ 256.011807] ? __schedule+0x168b/0x21d0 [ 256.015793] pagecache_get_page+0x12f/0xf00 [ 256.020383] ? add_to_page_cache_lru+0xdb0/0xdb0 [ 256.025158] ? print_usage_bug+0xc0/0xc0 [ 256.029227] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 256.033990] ? __might_sleep+0x95/0x190 [ 256.037972] ? pagecache_get_page+0x2d8/0xf00 [ 256.042471] ? mark_held_locks+0xc7/0x130 [ 256.046618] ? lock_downgrade+0x900/0x900 [ 256.050805] ? __find_get_block+0x2f7/0xf10 [ 256.055130] ? __find_get_block+0x2f7/0xf10 [ 256.059454] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 256.064038] ? trace_hardirqs_on+0xbd/0x310 [ 256.068361] ? __getblk_gfp+0x3d3/0x1030 [ 256.072428] ? trace_hardirqs_off_caller+0x300/0x300 [ 256.077533] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 256.083069] ? check_preemption_disabled+0x48/0x280 [ 256.088095] __find_get_block+0x635/0xf10 [ 256.092245] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 256.097704] ? try_to_free_buffers+0xd40/0xd40 [ 256.102286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 256.107825] ? unlock_page+0x2c2/0x4c0 [ 256.111716] ? wake_up_page_bit+0x6f0/0x6f0 [ 256.116038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 256.121575] ? init_page_buffers+0x433/0x570 [ 256.125989] ? __set_page_dirty_buffers+0x810/0x810 [ 256.131008] ? __getblk_gfp+0xbb7/0x1030 [ 256.135074] __getblk_gfp+0x3d3/0x1030 [ 256.138970] ? __find_get_block+0xf10/0xf10 [ 256.143297] ? __mutex_lock+0x85e/0x16f0 [ 256.147396] ? fat_free_clusters+0x2cc/0xe80 [ 256.151835] ? is_bpf_text_address+0xd3/0x170 [ 256.156339] ? print_usage_bug+0xc0/0xc0 [ 256.160398] ? mutex_trylock+0x2b0/0x2b0 [ 256.164466] ? print_usage_bug+0xc0/0xc0 [ 256.168546] ? __save_stack_trace+0x8d/0xf0 [ 256.172897] ? mark_held_locks+0xc7/0x130 [ 256.177049] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 256.181809] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 256.186396] ? retint_kernel+0x2d/0x2d [ 256.190291] __bread_gfp+0x2d/0x310 [ 256.193931] fat_ent_bread+0x173/0x290 [ 256.197825] fat_ent_read+0x646/0xc10 [ 256.201636] ? fat_ent_access_init+0x260/0x260 [ 256.206223] ? __mutex_lock+0x8cf/0x16f0 [ 256.210295] fat_free_clusters+0x31c/0xe80 [ 256.214545] ? fat_ent_read+0xc10/0xc10 [ 256.218519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.224066] ? timespec64_trunc+0xea/0x180 [ 256.228323] ? inode_init_owner+0x340/0x340 [ 256.232653] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.238217] ? fat_truncate_time+0x3cf/0x5c0 [ 256.242628] ? fat_time_unix2fat+0x760/0x760 [ 256.247041] ? fat_truncate_blocks+0x22d/0x10a0 [ 256.251715] fat_truncate_blocks+0x983/0x10a0 [ 256.256219] ? fat_file_release+0x150/0x150 [ 256.260540] ? retint_kernel+0x2d/0x2d [ 256.264488] ? unmap_mapping_range+0x48/0x60 [ 256.268934] ? truncate_pagecache+0x78/0x90 [ 256.273268] fat_setattr+0xc3d/0xe20 [ 256.276988] ? fat_truncate_blocks+0x10a0/0x10a0 [ 256.281843] notify_change+0xbde/0x1110 [ 256.285824] ? setattr_prepare+0x830/0x830 [ 256.290055] ? down_read+0x120/0x120 [ 256.293823] do_truncate+0x1bd/0x2d0 [ 256.297540] ? file_open_root+0x580/0x580 [ 256.301700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.307262] path_openat+0x375f/0x5150 [ 256.311151] ? rcu_read_unlock_special+0x370/0x370 [ 256.316080] ? rcu_softirq_qs+0x20/0x20 [ 256.320054] ? unwind_dump+0x190/0x190 [ 256.323959] ? path_lookupat.isra.43+0xc00/0xc00 [ 256.328718] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 256.333732] ? expand_files.part.8+0x571/0x9a0 [ 256.338321] ? find_held_lock+0x36/0x1c0 [ 256.342388] ? __alloc_fd+0x347/0x6e0 [ 256.346194] ? lock_downgrade+0x900/0x900 [ 256.350341] ? getname+0x19/0x20 [ 256.353718] ? kasan_check_read+0x11/0x20 [ 256.357864] ? do_raw_spin_unlock+0xa7/0x330 [ 256.362276] ? do_raw_spin_trylock+0x270/0x270 [ 256.366858] ? __lock_is_held+0xb5/0x140 [ 256.370922] ? __check_object_size+0xb1/0x782 [ 256.375430] ? _raw_spin_unlock+0x2c/0x50 [ 256.379579] ? __alloc_fd+0x347/0x6e0 [ 256.383390] do_filp_open+0x255/0x380 [ 256.387194] ? may_open_dev+0x100/0x100 [ 256.391202] ? strncpy_from_user+0x411/0x5a0 [ 256.395622] ? digsig_verify+0x1530/0x1530 [ 256.399860] ? get_unused_fd_flags+0x122/0x1a0 [ 256.404459] ? getname_flags+0x26e/0x590 [ 256.408830] do_sys_open+0x568/0x700 [ 256.412553] ? filp_open+0x80/0x80 [ 256.416100] ? __x32_compat_sys_openat+0xf0/0xf0 [ 256.420863] __x64_sys_creat+0x61/0x80 [ 256.424788] do_syscall_64+0x1b9/0x820 [ 256.428679] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 256.434048] ? syscall_return_slowpath+0x5e0/0x5e0 [ 256.438973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.443816] ? trace_hardirqs_on_caller+0x310/0x310 [ 256.448830] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 256.453853] ? prepare_exit_to_usermode+0x291/0x3b0 [ 256.458893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.463745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.468930] RIP: 0033:0x457569 [ 256.472128] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.491023] RSP: 002b:00007f5ed0a4bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 256.498728] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457569 [ 256.505993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 256.513255] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 256.520518] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ed0a4c6d4 [ 256.527784] R13: 00000000004bdbef R14: 00000000004cd070 R15: 00000000ffffffff [ 256.535351] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 259.551369] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0 [ 262.561378] syz-executor0(8041): getblk(): executed=9 bh_count=0 bh_state=0