0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:26 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:26 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:26 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1613.586385] attempt to access beyond end of device
[ 1613.592736] loop4: rw=1, want=130, limit=112
[ 1613.664469] attempt to access beyond end of device
[ 1613.669729] loop1: rw=2049, want=130, limit=112
23:22:27 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1613.716624] FAT-fs (loop3): invalid media value (0x00)
23:22:27 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:27 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fstat(0xffffffffffffffff, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:27 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fstat(0xffffffffffffffff, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1613.777791] FAT-fs (loop3): Can't find a valid FAT filesystem
23:22:27 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1614.439442] attempt to access beyond end of device
[ 1614.445252] loop2: rw=2049, want=114, limit=112
23:22:28 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fstat(0xffffffffffffffff, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:28 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:28 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(0xffffffffffffffff)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:28 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:28 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:28 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1615.101603] attempt to access beyond end of device
[ 1615.115916] loop0: rw=2049, want=114, limit=112
23:22:28 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:29 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1616.000261] FAT-fs (loop3): invalid media value (0x00)
[ 1616.012734] FAT-fs (loop3): Can't find a valid FAT filesystem
23:22:29 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:29 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:29 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:30 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:30 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:30 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1616.994023] attempt to access beyond end of device
[ 1616.999810] loop5: rw=2049, want=114, limit=112
23:22:30 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:31 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1617.536672] attempt to access beyond end of device
[ 1617.544217] loop5: rw=2049, want=130, limit=112
23:22:31 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:31 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:31 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(0xffffffffffffffff)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1617.985414] FAT-fs (loop4): bogus number of reserved sectors
[ 1618.053867] FAT-fs (loop4): Can't find a valid FAT filesystem
23:22:31 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:31 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:32 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:32 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(0xffffffffffffffff)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:32 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(0xffffffffffffffff, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:32 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1619.083847] FAT-fs (loop4): bogus number of reserved sectors
[ 1619.093193] FAT-fs (loop4): Can't find a valid FAT filesystem
23:22:32 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:33 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:33 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(0xffffffffffffffff)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:33 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:33 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1620.156200] attempt to access beyond end of device
[ 1620.162509] loop3: rw=2049, want=130, limit=112
23:22:33 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:33 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1620.379605] FAT-fs (loop4): bogus number of reserved sectors
[ 1620.428790] FAT-fs (loop4): Can't find a valid FAT filesystem
23:22:34 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1620.794257] attempt to access beyond end of device
[ 1620.827127] loop5: rw=2049, want=114, limit=112
23:22:34 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:34 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1620.973974] attempt to access beyond end of device
[ 1620.979659] loop3: rw=2049, want=114, limit=112
23:22:34 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:34 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:34 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1621.429438] attempt to access beyond end of device
[ 1621.434760] loop5: rw=2049, want=130, limit=112
23:22:35 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:35 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1621.649971] FAT-fs (loop4): bogus number of reserved sectors
[ 1621.712180] FAT-fs (loop4): Can't find a valid FAT filesystem
23:22:35 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1622.028699] attempt to access beyond end of device
23:22:35 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1622.064524] loop3: rw=2049, want=130, limit=112
23:22:35 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:36 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:36 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:36 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:36 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1622.872149] attempt to access beyond end of device
[ 1622.896527] loop3: rw=2049, want=114, limit=112
[ 1622.944946] FAT-fs (loop4): invalid media value (0x00)
[ 1622.973889] FAT-fs (loop4): Can't find a valid FAT filesystem
23:22:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:36 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:36 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1623.274196] attempt to access beyond end of device
[ 1623.306757] loop2: rw=2049, want=114, limit=112
[ 1623.351383] attempt to access beyond end of device
[ 1623.366942] loop5: rw=2049, want=114, limit=112
23:22:37 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:37 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:37 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:37 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1624.050545] FAT-fs (loop4): invalid media value (0x00)
[ 1624.061831] FAT-fs (loop4): Can't find a valid FAT filesystem
23:22:37 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:37 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:38 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1624.472148] FAT-fs (loop1): bogus number of reserved sectors
[ 1624.480519] FAT-fs (loop1): Can't find a valid FAT filesystem
23:22:38 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:38 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:38 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:38 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1625.251178] FAT-fs (loop4): invalid media value (0x00)
23:22:38 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1625.298605] FAT-fs (loop4): Can't find a valid FAT filesystem
23:22:39 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:39 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(0xffffffffffffffff, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1625.652788] FAT-fs (loop1): bogus number of reserved sectors
[ 1625.667318] FAT-fs (loop1): Can't find a valid FAT filesystem
23:22:39 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:39 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:39 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:39 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:40 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:40 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85af"], 0x45)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1626.794514] FAT-fs (loop1): bogus number of reserved sectors
[ 1626.829891] FAT-fs (loop1): Can't find a valid FAT filesystem
23:22:40 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(0xffffffffffffffff)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1626.910788] attempt to access beyond end of device
[ 1626.916173] loop4: rw=2049, want=114, limit=112
23:22:40 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1627.210028] hfsplus: unable to find HFS+ superblock
23:22:41 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:41 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1627.820733] attempt to access beyond end of device
[ 1627.833721] loop4: rw=2049, want=130, limit=112
23:22:41 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:41 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1628.001515] FAT-fs (loop1): bogus number of reserved sectors
[ 1628.018697] attempt to access beyond end of device
[ 1628.026102] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1628.039545] loop5: rw=2049, want=130, limit=112
23:22:41 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:41 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:41 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1628.470596] hfsplus: unable to find HFS+ superblock
[ 1628.732509] FAT-fs (loop2): bogus number of reserved sectors
[ 1628.790281] FAT-fs (loop2): Can't find a valid FAT filesystem
23:22:42 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:42 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1629.146898] FAT-fs (loop1): invalid media value (0x00)
[ 1629.175247] FAT-fs (loop1): Can't find a valid FAT filesystem
23:22:42 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a536"], 0x79)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:42 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:42 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:43 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:43 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1629.846977] FAT-fs (loop2): bogus number of reserved sectors
[ 1629.931460] FAT-fs (loop2): Can't find a valid FAT filesystem
23:22:43 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:43 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:43 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a3743"], 0x82)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1630.472647] FAT-fs (loop1): invalid media value (0x00)
23:22:44 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1630.501402] FAT-fs (loop1): Can't find a valid FAT filesystem
23:22:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:44 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:44 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1630.955934] FAT-fs (loop2): bogus number of reserved sectors
[ 1630.999194] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1631.248281] attempt to access beyond end of device
[ 1631.261107] loop0: rw=2049, want=114, limit=112
23:22:44 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:44 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:44 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a3743"], 0x82)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1631.541848] FAT-fs (loop1): invalid media value (0x00)
[ 1631.571952] FAT-fs (loop1): Can't find a valid FAT filesystem
23:22:45 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:45 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:45 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:45 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1632.178166] FAT-fs (loop5): bogus number of reserved sectors
[ 1632.219242] FAT-fs (loop2): bogus number of reserved sectors
[ 1632.224399] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1632.229251] FAT-fs (loop2): Can't find a valid FAT filesystem
23:22:46 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1632.488888] attempt to access beyond end of device
[ 1632.495786] loop4: rw=2049, want=114, limit=112
23:22:46 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:46 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:46 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:46 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:46 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:46 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1633.270363] attempt to access beyond end of device
[ 1633.284532] loop0: rw=2049, want=114, limit=112
[ 1633.414024] attempt to access beyond end of device
[ 1633.415160] FAT-fs (loop2): invalid media value (0x00)
[ 1633.419107] loop4: rw=1, want=114, limit=112
[ 1633.452218] FAT-fs (loop5): bogus number of reserved sectors
23:22:47 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1633.465319] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1633.480011] FAT-fs (loop2): Can't find a valid FAT filesystem
23:22:47 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:47 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:47 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1633.965226] attempt to access beyond end of device
[ 1633.982204] loop0: rw=2049, want=130, limit=112
23:22:47 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:47 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:48 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1634.388896] attempt to access beyond end of device
[ 1634.396896] loop1: rw=2049, want=130, limit=112
23:22:48 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85af"], 0x45)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:48 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1634.612397] FAT-fs (loop2): invalid media value (0x00)
[ 1634.629131] FAT-fs (loop2): Can't find a valid FAT filesystem
23:22:48 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1634.782593] FAT-fs (loop5): bogus number of reserved sectors
[ 1634.796591] FAT-fs (loop5): Can't find a valid FAT filesystem
23:22:48 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827"], 0x88)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:49 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:49 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:49 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:49 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1635.848984] FAT-fs (loop2): invalid media value (0x00)
[ 1635.867217] FAT-fs (loop2): Can't find a valid FAT filesystem
23:22:49 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1635.996303] FAT-fs (loop5): bogus number of reserved sectors
[ 1636.008626] FAT-fs (loop5): Can't find a valid FAT filesystem
23:22:50 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:50 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba"], 0x89)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:50 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1637.134359] FAT-fs (loop5): invalid media value (0x00)
23:22:50 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r1, &(0x7f00000016c0))
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1637.161836] FAT-fs (loop5): Can't find a valid FAT filesystem
23:22:50 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a536"], 0x79)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:50 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(0xffffffffffffffff)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:50 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1637.693468] FAT-fs (loop5): invalid media value (0x00)
[ 1637.727616] FAT-fs (loop5): Can't find a valid FAT filesystem
23:22:51 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:51 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:51 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:52 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:52 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a3743"], 0x82)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:52 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1638.860215] FAT-fs (loop5): invalid media value (0x00)
23:22:52 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1638.884089] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1639.134450] attempt to access beyond end of device
[ 1639.150148] loop1: rw=2049, want=114, limit=112
23:22:52 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:52 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:52 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1639.283973] attempt to access beyond end of device
[ 1639.297090] loop2: rw=2049, want=114, limit=112
23:22:52 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:53 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:53 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1639.952582] attempt to access beyond end of device
[ 1639.970090] loop1: rw=2049, want=130, limit=112
23:22:53 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:53 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:54 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1640.576497] attempt to access beyond end of device
[ 1640.582116] loop3: rw=2049, want=114, limit=112
23:22:54 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:54 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:54 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:54 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1640.785582] attempt to access beyond end of device
[ 1640.801921] loop0: rw=2049, want=114, limit=112
23:22:54 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:54 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:54 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(0xffffffffffffffff, &(0x7f00000016c0))
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:54 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1641.445386] attempt to access beyond end of device
[ 1641.455201] attempt to access beyond end of device
[ 1641.460379] loop0: rw=2049, want=130, limit=112
[ 1641.464923] loop5: rw=2049, want=130, limit=112
23:22:55 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:55 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1641.615982] attempt to access beyond end of device
[ 1641.622191] loop3: rw=2049, want=130, limit=112
23:22:55 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:55 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1642.253060] attempt to access beyond end of device
[ 1642.282839] loop5: rw=2049, want=130, limit=112
23:22:56 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:56 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1642.492298] attempt to access beyond end of device
[ 1642.498088] loop3: rw=2049, want=114, limit=112
23:22:56 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827"], 0x88)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:56 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(0xffffffffffffffff)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:56 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1642.784670] attempt to access beyond end of device
[ 1642.791615] loop5: rw=2049, want=114, limit=112
23:22:56 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:56 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:56 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1643.181789] attempt to access beyond end of device
[ 1643.187214] loop2: rw=2049, want=114, limit=112
23:22:56 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1643.564975] attempt to access beyond end of device
[ 1643.592687] loop0: rw=2049, want=130, limit=112
23:22:57 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:57 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:57 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1643.777320] attempt to access beyond end of device
[ 1643.782360] loop2: rw=2049, want=130, limit=112
23:22:57 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba"], 0x89)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:57 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:57 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:58 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:58 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:58 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:58 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85af"], 0x45)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:58 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:58 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:58 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(0xffffffffffffffff, &(0x7f00000016c0))
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:58 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r1, &(0x7f00000016c0))
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:59 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:59 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:59 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:22:59 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:59 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:59 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:22:59 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(0xffffffffffffffff)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:00 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:00 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1647.021927] attempt to access beyond end of device
[ 1647.048388] loop0: rw=2049, want=114, limit=112
23:23:00 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:00 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:00 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:01 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a536"], 0x79)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:01 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:01 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:01 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1647.846387] attempt to access beyond end of device
[ 1647.852822] loop0: rw=2049, want=130, limit=112
23:23:01 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:01 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:01 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1648.319964] attempt to access beyond end of device
[ 1648.336503] loop4: rw=2049, want=130, limit=112
23:23:01 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(0xffffffffffffffff, &(0x7f00000016c0))
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:02 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:02 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:02 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:02 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:02 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1649.214602] attempt to access beyond end of device
[ 1649.225645] loop4: rw=2049, want=114, limit=112
23:23:02 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608"], 0x57)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:02 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:03 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(0xffffffffffffffff)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:03 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85af"], 0x45)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:03 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:03 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:04 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:04 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:04 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:04 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f"], 0x60)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:04 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:04 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:04 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:04 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:05 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:05 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:05 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:05 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d"], 0x64)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:05 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:05 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:05 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180), 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:05 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:06 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:06 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:06 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:06 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85af"], 0x45)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:06 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:06 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de0"], 0x66)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:06 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:07 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1653.585953] attempt to access beyond end of device
[ 1653.613612] loop1: rw=2049, want=130, limit=112
[ 1654.080216] attempt to access beyond end of device
[ 1654.088183] loop4: rw=2049, want=130, limit=112
23:23:08 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:08 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:08 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d"], 0x64)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:08 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:08 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780))
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:08 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:08 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:08 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:09 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a536"], 0x79)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:09 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:09 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:09 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:09 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:09 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180), 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1656.450939] attempt to access beyond end of device
[ 1656.467761] loop4: rw=2049, want=114, limit=112
23:23:10 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d"], 0x64)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:10 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:10 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a3743"], 0x82)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:10 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a536"], 0x79)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:10 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:10 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85af"], 0x45)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:11 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:11 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:11 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1658.202024] attempt to access beyond end of device
[ 1658.219235] loop3: rw=2049, want=130, limit=112
23:23:11 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780))
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:12 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1658.520618] attempt to access beyond end of device
[ 1658.543564] loop2: rw=2049, want=114, limit=112
23:23:12 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:12 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a3743"], 0x82)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:12 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1658.648091] attempt to access beyond end of device
[ 1658.667128] loop4: rw=2049, want=114, limit=112
23:23:12 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1659.355040] attempt to access beyond end of device
[ 1659.372199] loop5: rw=2049, want=114, limit=112
23:23:13 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:13 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:13 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

[ 1659.878878] attempt to access beyond end of device
23:23:13 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827"], 0x88)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:13 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1659.905452] loop5: rw=2049, want=130, limit=112
23:23:13 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:13 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9b"], 0x68)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1660.461224] attempt to access beyond end of device
[ 1660.498702] loop2: rw=2049, want=114, limit=112
[ 1660.603910] attempt to access beyond end of device
23:23:14 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827"], 0x88)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1660.626475] loop5: rw=2049, want=114, limit=112
23:23:14 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a536"], 0x79)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:14 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:14 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e9")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:14 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827"], 0x88)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:14 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1661.597573] attempt to access beyond end of device
[ 1661.620443] attempt to access beyond end of device
[ 1661.626872] loop0: rw=2049, want=130, limit=112
[ 1661.638112] loop3: rw=2049, want=130, limit=112
23:23:15 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:15 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e9")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:15 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba"], 0x89)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:15 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a3743"], 0x82)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:16 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba"], 0x89)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1662.535179] attempt to access beyond end of device
[ 1662.552219] loop3: rw=2049, want=114, limit=112
23:23:16 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:16 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1662.962064] attempt to access beyond end of device
[ 1662.993189] loop1: rw=2049, want=114, limit=112
23:23:16 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:16 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4b"], 0x86)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:16 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba"], 0x89)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:16 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:16 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:17 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:17 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:17 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827"], 0x88)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:17 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x0, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:18 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:18 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:18 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:18 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:18 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd995")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:19 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba"], 0x89)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:19 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:19 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:19 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:19 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1666.285412] attempt to access beyond end of device
[ 1666.293232] loop5: rw=2049, want=130, limit=112
23:23:19 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:20 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:20 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba"], 0x89)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:20 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1666.828798] attempt to access beyond end of device
[ 1666.853352] loop1: rw=2049, want=114, limit=112
23:23:20 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680), 0x0, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:20 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:20 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:20 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1667.105134] attempt to access beyond end of device
[ 1667.112402] loop3: rw=2049, want=114, limit=112
23:23:20 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd995")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:21 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:21 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680), 0x0, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:21 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(0xffffffffffffffff, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1667.767709] attempt to access beyond end of device
[ 1667.774053] loop1: rw=2049, want=130, limit=112
23:23:21 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1667.977028] attempt to access beyond end of device
[ 1667.982492] loop4: rw=2049, want=130, limit=112
23:23:21 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:21 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:22 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959a")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:22 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1668.508707] attempt to access beyond end of device
[ 1668.520630] loop0: rw=2049, want=114, limit=112
23:23:22 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680), 0x0, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:22 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:22 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:22 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:22 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180), 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1669.620274] attempt to access beyond end of device
[ 1669.666115] loop5: rw=2049, want=130, limit=112
23:23:23 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:23 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:23 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:23 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460", 0x4, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:23 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0x0, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:24 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:24 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180), 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:24 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1671.105393] attempt to access beyond end of device
23:23:24 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c8", 0x6, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:24 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1671.128139] attempt to access beyond end of device
[ 1671.133825] loop2: rw=2049, want=114, limit=112
[ 1671.161131] loop1: rw=2049, want=114, limit=112
23:23:24 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180), 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:24 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:25 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780))
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:25 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:25 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0x0, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:25 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:26 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7}], 0x0, &(0x7f0000000a00)={[{@force='force'}, {@gid={'gid'}}]})

23:23:26 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780))
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:26 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x0)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:26 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:26 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x0)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:26 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180), 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:26 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:27 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00)={[{@force='force'}]})

23:23:27 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x0)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:27 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1673.823512] attempt to access beyond end of device
[ 1673.828985] loop5: rw=2049, want=130, limit=112
[ 1673.907415] attempt to access beyond end of device
[ 1673.912455] loop4: rw=2049, want=130, limit=112
23:23:27 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180), 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:27 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1674.522880] attempt to access beyond end of device
[ 1674.541683] loop2: rw=2049, want=114, limit=112
23:23:28 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:28 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0x0, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:28 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:28 executing program 0:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
syz_mount_image$hfsplus(&(0x7f0000000540)='hfsplus\x00', &(0x7f0000000580)='./bus\x00', 0x4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000680)="7cf32460b5c862", 0x7, 0x100000001}], 0x0, &(0x7f0000000a00))

23:23:28 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed5468069c51e974dd")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:28 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:29 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780))
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:29 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:29 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:29 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)="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")
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000080))
ioctl$FS_IOC_SETFLAGS(r0, 0x6611, &(0x7f0000000140))

23:23:30 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288a")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:30 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000200))
socket$inet(0x2, 0x8000e, 0xbb0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r0}, 0x10)

23:23:30 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780))
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:30 executing program 0:
r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0)
write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0x0, 0x6}, 0x20)

23:23:30 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x800000000002)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
getsockname(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x80)

23:23:30 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:30 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae09d32795cf5256ed")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:30 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0x0, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:30 executing program 0:
r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000080), 0x0)
ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280), 0x8)

[ 1677.282315] attempt to access beyond end of device
[ 1677.288142] loop4: rw=2049, want=114, limit=112
23:23:31 executing program 4:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fchdir(r1)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7d"], 0x65)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288a")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1677.492675] attempt to access beyond end of device
[ 1677.498188] loop1: rw=2049, want=130, limit=112
23:23:31 executing program 0:
mount(&(0x7f0000000240), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)

23:23:31 executing program 1:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1677.794888] attempt to access beyond end of device
[ 1677.819022] loop2: rw=2049, want=130, limit=112
[ 1677.836673] kasan: CONFIG_KASAN_INLINE enabled
[ 1677.850719] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 1677.865339] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 1677.871606] CPU: 1 PID: 8845 Comm: syz-executor0 Not tainted 4.19.0-rc4-next-20180920+ #76
[ 1677.880028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1677.887928] kobject: 'loop1' (00000000b802f40b): kobject_uevent_env
[ 1677.889430] RIP: 0010:ubifs_mount+0x1b5/0x75fe
[ 1677.889450] Code: ff ff e8 4e e4 01 ff 49 81 ff 00 f0 ff ff 0f 86 fe 03 00 00 e8 0c e3 01 ff 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 93 1a 00 00
[ 1677.889459] RSP: 0018:ffff880194e57620 EFLAGS: 00010246
[ 1677.889474] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90009949000
[ 1677.889491] RDX: 0000000000000000 RSI: ffffffff827b6ce4 RDI: 0000000000000007
[ 1677.919300] kobject: 'loop1' (00000000b802f40b): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1677.919376] RBP: ffff880194e57b88 R08: ffff88019dc9c340 R09: ffffed003b5a5b57
[ 1677.936229] attempt to access beyond end of device
[ 1677.939279] R10: ffffed003b5a5b57 R11: ffff8801dad2dabb R12: 0000000000000000
[ 1677.939289] R13: ffffffff89990a60 R14: ffff880194e57b60 R15: ffffffffffffffea
[ 1677.939302] FS:  00007f105d522700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000
[ 1677.939312] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1677.939320] CR2: 0000001b32820000 CR3: 00000001be9f2000 CR4: 00000000001406e0
[ 1677.939331] Call Trace:
[ 1677.939354]  ? is_bpf_text_address+0xd3/0x170
[ 1677.939371]  ? kernel_text_address+0x79/0xf0
[ 1677.939387]  ? __kernel_text_address+0xd/0x40
[ 1677.939402]  ? unwind_get_return_address+0x61/0xa0
[ 1677.939419]  ? __save_stack_trace+0x8d/0xf0
[ 1677.939442]  ? ubifs_iget+0x1c20/0x1c20
[ 1677.939466]  ? save_stack+0xa9/0xd0
[ 1677.956989] loop3: rw=2049, want=130, limit=112
[ 1677.961120]  ? save_stack+0x43/0xd0
[ 1677.961134]  ? kasan_kmalloc+0xc7/0xe0
[ 1677.961147]  ? __kmalloc_track_caller+0x14a/0x750
[ 1677.961159]  ? krealloc+0x65/0xb0
[ 1677.961174]  ? apparmor_fs_context_parse_param+0x1d9/0x490
[ 1677.961188]  ? security_fs_context_parse_param+0x5a/0xb0
[ 1677.961200]  ? vfs_parse_fs_param+0x1ea/0x3c0
[ 1677.961213]  ? vfs_parse_fs_string+0x1d5/0x2b0
[ 1677.961226]  ? do_mount+0x666/0x1db0
[ 1677.961238]  ? ksys_mount+0x12d/0x140
[ 1677.961251]  ? __x64_sys_mount+0xbe/0x150
[ 1677.961265]  ? do_syscall_64+0x1b9/0x820
[ 1677.961282]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1677.961303]  ? find_held_lock+0x36/0x1c0
[ 1678.035870] kobject: 'loop1' (00000000b802f40b): kobject_uevent_env
[ 1678.038305]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1678.038323]  ? check_preemption_disabled+0x48/0x200
[ 1678.038343]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1678.038359]  ? check_preemption_disabled+0x48/0x200
[ 1678.038377]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[ 1678.038391]  ? rcu_pm_notify+0xc0/0xc0
[ 1678.038414]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1678.038429]  ? check_preemption_disabled+0x48/0x200
[ 1678.038447]  ? rcu_lockdep_current_cpu_online+0x1a4/0x210
[ 1678.038461]  ? rcu_pm_notify+0xc0/0xc0
[ 1678.038483]  ? vfs_parse_fs_string+0x1f8/0x2b0
[ 1678.038500]  ? rcu_read_lock_sched_held+0x108/0x120
[ 1678.038514]  ? kfree+0x1fa/0x230
[ 1678.038534]  ? ubifs_iget+0x1c20/0x1c20
[ 1678.038558]  legacy_get_tree+0x131/0x460
[ 1678.038578]  vfs_get_tree+0x1cb/0x5c0
[ 1678.042822] kobject: 'loop1' (00000000b802f40b): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1678.047301]  ? legacy_fs_context_dup+0x1d0/0x1d0
[ 1678.047316]  do_mount+0x70c/0x1db0
[ 1678.047331]  ? lock_release+0x970/0x970
[ 1678.047349]  ? copy_mount_string+0x40/0x40
[ 1678.047373]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1678.047388]  ? _copy_from_user+0xdf/0x150
[ 1678.047404]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1678.047418]  ? copy_mount_options+0x315/0x430
[ 1678.047433]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1678.047451]  ksys_mount+0x12d/0x140
[ 1678.232221]  __x64_sys_mount+0xbe/0x150
[ 1678.236220]  do_syscall_64+0x1b9/0x820
[ 1678.240132]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1678.245505]  ? syscall_return_slowpath+0x5e0/0x5e0
[ 1678.251938]  ? trace_hardirqs_off+0x310/0x310
[ 1678.256441]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 1678.261465]  ? recalc_sigpending_tsk+0x180/0x180
[ 1678.266237]  ? kasan_check_write+0x14/0x20
[ 1678.270482]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1678.275336]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1678.280523] RIP: 0033:0x457679
[ 1678.283728] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1678.302656] RSP: 002b:00007f105d521c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1678.310377] RAX: ffffffffffffffda RBX: 00007f105d5226d4 RCX: 0000000000457679
23:23:31 executing program 5:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
eventfd2(0x6fc, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r2, &(0x7f00000016c0))
fchdir(r0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1678.317666] RDX: 0000000020fdb000 RSI: 0000000020d78000 RDI: 0000000020000240
[ 1678.324939] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1678.332215] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1678.339494] R13: 00000000004d3b58 R14: 00000000004c297a R15: 0000000000000000
[ 1678.346775] Modules linked in:
[ 1678.358854] ---[ end trace a624b743bb28a392 ]---
[ 1678.379439] RIP: 0010:ubifs_mount+0x1b5/0x75fe
[ 1678.384976] Code: ff ff e8 4e e4 01 ff 49 81 ff 00 f0 ff ff 0f 86 fe 03 00 00 e8 0c e3 01 ff 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 93 1a 00 00
[ 1678.405352] kobject: 'loop5' (00000000afa50b50): kobject_uevent_env
[ 1678.411844] kobject: 'loop5' (00000000afa50b50): fill_kobj_path: path = '/devices/virtual/block/loop5'
23:23:32 executing program 2:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x6fc, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2fef7ae")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

23:23:32 executing program 3:
socket$key(0xf, 0x3, 0x2)
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[])
syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000800)='/dev/audio#\x00', 0x0, 0x400)
ioctl$VT_RELDISP(r0, 0x5605)
eventfd2(0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00')
fstat(r3, &(0x7f00000016c0))
fchdir(r1)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3abe483a608e2d94fcadcb572c54f42bb8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88ab3af3a374371241c4be827ba30"], 0x8a)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000440)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x8080fffffffe)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40))
lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000980))
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000780)="b1027ffaf4c48219f5e9ab6b2d373ff80ca1ed2103ad00e3df6a288ae1b15a3e7907b6f9cd7575d1fcb7a751ec8d324dd9959ae2")
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x430, 0x0, 0x118, 0x230, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x2}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x8, 0x1, 0x2, 0x2, 0x7fffffff, 'bridge_slave_0\x00', 'syz_tun\x00'}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@arp={@rand_addr=0x1, @rand_addr, 0xffffff00, 0xff000000, @mac=@broadcast, {[0x0, 0xff, 0xff, 0xff]}, @mac=@broadcast, {[0xff]}, 0x0, 0x5, 0x5, 0x1, 0x9, 0x1, 'eql\x00', 'tunl0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001d00)={@loopback}, 0x8)
getpid()
getgid()

[ 1678.428797] RSP: 0018:ffff880194e57620 EFLAGS: 00010246
[ 1678.435910] kobject: 'loop1' (00000000b802f40b): kobject_uevent_env
[ 1678.442394] kobject: 'loop1' (00000000b802f40b): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1678.452337] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90009949000
[ 1678.460730] RDX: 0000000000000000 RSI: ffffffff827b6ce4 RDI: 0000000000000007
[ 1678.468664] RBP: ffff880194e57b88 R08: ffff88019dc9c340 R09: ffffed003b5a5b57
[ 1678.479837] R10: ffffed003b5a5b57 R11: ffff8801dad2dabb R12: 0000000000000000
[ 1678.488083] R13: ffffffff89990a60 R14: ffff880194e57b60 R15: ffffffffffffffea
[ 1678.495763] FS:  00007f105d522700(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000
[ 1678.504784] kobject: 'loop2' (0000000078a660c4): kobject_uevent_env
[ 1678.511271] kobject: 'loop2' (0000000078a660c4): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1678.518054] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1678.533267] CR2: 0000000000625208 CR3: 00000001be9f2000 CR4: 00000000001406e0
[ 1678.541071] Kernel panic - not syncing: Fatal exception
[ 1678.547424] Kernel Offset: disabled
[ 1678.551050] Rebooting in 86400 seconds..