dir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x71, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 03:35:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0xfdfdffff00000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0xfeffffff00000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:40 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3c4, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xcc}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x93}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x48ac}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0xff00000000000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 445.866353][ T27] audit: type=1804 audit(2000000140.329:79): pid=17425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir186249847/syzkaller.R2gl8g/269/file0/file0" dev="sda1" ino=16577 res=1 03:35:40 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = dup(0xffffffffffffffff) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r6, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) r7 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000640)={&(0x7f0000000200), 0xc, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYRES16=r7, @ANYBLOB], 0x2}}, 0x1) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbb}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044040) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r9}, 0x18) close(r4) 03:35:40 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0xff03000000000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:40 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x2, 0x0, [0x7d, 0x8, 0x9, 0x8, 0x80, 0x6, 0x80, 0x52]}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = dup(0xffffffffffffffff) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) connect$bt_sco(r3, &(0x7f0000000080), 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0x1f, 0x1f3, &(0x7f0000000340)}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000e40)={0x1d, r7}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000e40)={0x1d, r10}, 0x18) close(r8) 03:35:40 executing program 3: chdir(0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'system.posix_acl_default\x00'}, 0x0, 0x0) 03:35:41 executing program 2: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x1b9, 0x11, &(0x7f0000000340)}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x7, &(0x7f00000009c0)=[{&(0x7f00000000c0)="b15c0ad83c8b768a1e0df122c4b421f38d07dddd36c057d1e77c9cf18358799269604cd5158865befa0fa457cbf25acf1789471b0d03fc79bf8eaf7ed773d0fb12ccb8d5369f99e0ca210059ef72cc72fcc53d7b30c4d05059f76c050da05dc1b496f3f13db846df5d3c3bd91822d402eea02e8fc6e53e3b2568b0e93b0346b91d76767cd4af2cabaf3c51875d127df2a1a88daa98f54a922529a61f", 0x9c, 0x6}, {&(0x7f0000000180)="e08dfdbdb801ce39a2531878dad3dc1cc12b3822e2aa27834cb59b62f3ce572dec8b26f0da8e757308b9eed014dc7278a07cd8587fcda2b803a8d45baf08bd61acd9691ce2ec35a669a13fc74ac26071a9583ad9b4c630accf6319cd7941ff89d0d0499c0e95275af14c95e17d6d903be16390f4c42e964b5775ac67e615b636cd4eee3b6f15f92d8416db189ae2c93222a3bf3d56ecda898fbb897d4de756a2a78f76a5adf7a5c586c8b0648e246647c28b49840beab55c07d482359202f90333d4aaf23a0506214c561531adec84050770b3e7a5d06cfa46a4333e1dee42dca4ff2b2154c3c10ffc0065", 0xeb, 0x7}, {&(0x7f0000000740)="4e447aaff190c26655392475520d70a905db3ceb2ccd68cebf8528a5092a753fdcb93d8e41b2a5cbeeae800f6b955ba4c236084095d7b982f000eafdc52ed5918aba5679850f1c5a43642fc1f23dd3952ba9df8aa50b031397949a19c25e01e1326bbd915dd53e91215f1ca7a9f584dd3e9b4aad5b4b04cf931c8866de442f062e545e8467d40b880320c00d967a0bdf665bd16db51d6fcc2a2c5d7992e51e7f1d1b0bec3af03efbca45ba35276b1cda7080c5dadc8e900b85da8201e5949a36a0f08002565c50ed3e4c15ea2e3e844e02d4a219dcd820bc", 0xd8, 0x8001}, {&(0x7f0000000280)="7cdab7a1f8a5a4cfa79b0e38591b8fd671e1b575c3c638fe0356a6355de9a8fca5e0e37340e66fd16131e7", 0x2b, 0x1ff}, {&(0x7f0000000840)="4b7f3433c736e9b3ce3e35795534335832db092b813abf99fb682e85bb1779ca1acac89ff09d203efb5c41e2fd5b70f17f12bdc9aa1e6074410284be366a93cb0d6d2fd83605d84e9dd5c9dfbdce0830c5ceaaa185d8b504a2ebff9feb6d8ccbff285609fb32f8c46a20bc0021467131a701a03286eae093cbcf56f609e3d3f7708df95918fd338637f6e338e5297425b9c64328d9341bda3fbf889c00084192a3927ec214081aa7d1c356b42446f6", 0xaf, 0xfff}, {&(0x7f0000000900)="b565e3d2af85a75d47a8e6cfbcb9a52510a21542c7023965334dcd23dc8b79cfad25282f9b91d3e4260f80bc6a8a64415bfcdacd2d5dbb3f057f4fb54cebac49dcec604da99c86a8f90897d35f85972ff861b5db7e19c5f8b71f016ac5c92fece7a2e928b35b3b55a488f03ad96ebfc4a16c1b152b8c837410bffe07bcdfdffce2fb876237c11d80ed8077", 0x8b, 0x8}, {&(0x7f00000002c0)="51c938e55b238d74c269fcab58e6bf46daa51ca9fad699938e30", 0x1a, 0x6}], 0x18a000, 0x0) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r5}, 0x18) close(r3) 03:35:41 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0xffff1f0000000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x30) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, &(0x7f0000000600)={0x0, &(0x7f0000000080)=[&(0x7f0000000100)="e13874639fce849020728bd7e5cc04a3e43b5118dcb8a19d9052f9a289df3759eaae587af928ca5e43bd23c2ec98c895821ab2a5dbd190d671c3c0a13df294ac8aa6e2d7be70052d42df7e42b097668af2d2c1221ed365de7fb958db40ce614590f026f11a3ec542c7a884bb850e034de33f4a083815a2b3d5d71b1bcbb528eace9e2a008f8cb12df8d932d70d", &(0x7f0000000240)="a66cb17aa0ad51092f1ffd3038cabf4ed10cf895912e0dee5bfef301ad08bf0541f80bf0c6281f1b23d612c2f3b5be1f99afd517806010a9c64b242aa27242e9679554ec6bd542df913342818eed3e7cf1d64790d6ae7684ca05111505ab3837e9a9769bd2c783c191e64917f7a2172b4f4c0a70c338368babd7e4a39bb23cdf3008702d30ed2a0cc915f5064af9b9aa32c3426a306616791a1a6a7f1864059f44276ddcacba80ba796f1af4237e8c0136bed766a608585cec580472ddbf80f5ecac2445155a439afdc3cc86406a9fdec830acccdc7e5a5fcf4386cf79e485ac4875e97c4c1f37ee713c4c85f2331a5eb40155a4", &(0x7f0000000340)="c354fbda601d66454225da8e7499dd8044c241dca2e8a85859117d8ee16f8c92228f25e7d2dce7059123e2de633db6517de972c9f32c5529d9902c4426909245937a8325c50e29ea3808c58bef7bb74ee819ea280bf5b4af7d37738fff3ed50ac7390b9dfada885c9acf42f3f30467d4d59a2df16a7642abc3eb30f4adbae2884f0af8e3af5eaf86de005245b5ed54fe20d563e853a1b6", &(0x7f0000000400)="abeaa54d735b223104278704d17ebcd2eb8251a0fe2d5fb4cccdbfa6e1c528f69fa25cfb8b2223b5ff06c5704fc8cea59e63fb30a24fec2187a78b903f4d622d6110c31399eb630d889bb252440d841a194888857d1ceab2c9e610aeb13d705aa0f0e3a5167e7aac94fe391ebbc99d7967a7317569880986159d1752b213cfe807b24ce59f0bc22340838d3a4e324b2cd3a0acb4d46a11dbe80027a03e2d96814ad4f9a202f819256e", &(0x7f0000000040)='/', &(0x7f0000001040)="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", &(0x7f00000004c0)="6699979d46e5a837f9cacafea29820dbcf3df3a3bc2f1ddced27de75a82a36b524105ba94a92811812055d993f6f86cab3c369421593ee8d917dafcd6c7fa24fb820840c385332d4ab99e890e51dcb55d683146aba677cc394bd618cce69bb189e90d8591a53edbee0d9ab7fa4f4e506caf5f2bbd85f9fcdffa219e642", &(0x7f0000000540)="41e9b9ca71398dba8abd0ee8192fa4061f90b9bd5f3c139864ecf697a0816a0d602f740aec5caa9aac5eec65e5b315f6e317ea95a3b7bb16bd42c6d838f77eb3e4f3ff11c4bf633556e500abf4263f31e8edb663819fada91a735b592115a9fd18c6a4976413f4ef888cd55b7e4f812abd2936af86294f53b3003244107997e3ae70a1af6ab87798457e44cd6571ef87945e5578be69d450993aa293a2fc422774763d3bfd28a9a9"], 0x5}) chdir(0x0) mount$9p_virtio(&(0x7f0000000640)='syz\x00', &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='9p\x00', 0x8020, &(0x7f0000000700)=ANY=[@ANYBLOB='rt)o,acuser,\x00\x00\x00\x00\x00\x00']) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:41 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r2, 0x0, {0x2}, 0xfd}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r0) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) listen(r3, 0x126) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x12000000, &(0x7f0000000080)="1f8b5178fee8816e01d2c90e1a4260e7f434ec2892d80fad679c5b5b39931af080b9b16899e18eb0e19860d1ba230b4befd441ca6bc800f39a46c0ad6bcd33030c5926614281eb5248633c56", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="71d013aba2b5") ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r7 = fcntl$dupfd(r0, 0x605, 0xffffffffffffffff) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) ioctl$TIOCMGET(r9, 0x5415, &(0x7f00000001c0)) getsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6}, 0x18) close(r4) 03:35:41 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:41 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0xa, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x1d, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x159942, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000ba0193049b1766f9332800270d000000", @ANYRES32=r4, @ANYBLOB="ca"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000100)) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r5}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r9 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x3, 0x40000) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r8}, 0x18) close(r6) 03:35:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7f, 0x404002) r3 = syz_genetlink_get_family_id$netlbl_calipso(0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48}, 0x0) r4 = socket(0x5, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:35:42 executing program 3: chdir(0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.advise\x00', 0x0, 0x0) 03:35:42 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[]}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000000)=[0x3, 0xff, 0x7, 0x4, 0x7fff, 0x200, 0x800, 0xfff7, 0x0, 0x2], &(0x7f0000000040)=[0xe0e1], &(0x7f0000000080)=[0x5, 0x5, 0x8000], &(0x7f00000000c0)=[0x9]}) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r5}, 0x18) close(r3) 03:35:42 executing program 3: chdir(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x400, 0x4) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:42 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x23}, 0xffff7815}, {0xa, 0x4e22, 0x7, @loopback, 0x1ff}, 0x0, [0x100, 0x1, 0x7, 0x6000000, 0xff, 0x2, 0x6, 0xfffffe01]}, 0x5c) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f00000000c0)=0x1) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r7, 0x1, {0x0, 0x1, 0x1}}, 0xfffffffffffffdd1) close(r5) 03:35:42 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x8000, 0x70a1, 0x0, 0x81, 0x2, 0x2, 0x1}, 0xc) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000000)={0x4, 0x9, 0x9, 0xe9, 0xb0, 0x13, 0x26, "5569ac288077c1a08b9daae99b3a3440784fff88", "b8b6c7370992e723d208ddf4603d76e9f9ae6a1d"}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:42 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x4000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000000)={0x7b, 0x3, 0x4, 0x0, 0x1, {0x77359400}, {0x4, 0x8, 0xd0, 0x4, 0x8, 0x3, "9b01ad44"}, 0x3, 0x3, @offset=0x6, 0x1, 0x0, r5}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6}, 0x18) close(r4) 03:35:42 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', '\x00'}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)={{0x77359400}, {r0, r1/1000+30000}}) 03:35:43 executing program 4: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e000100000f00010000000007400000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x8000) r4 = dup(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r6, 0xf, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9c202a1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf84d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x40040) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x20, @mcast2, 0x87}, 0x1c) 03:35:43 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x2}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000000)=""/160) close(r3) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3d) ioctl$VIDIOC_G_ENC_INDEX(r7, 0x8818564c, &(0x7f0000000340)) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f0000000100)='dirsync\x00', 0x0, 0x0) 03:35:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000200000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:43 executing program 3: chdir(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000040)={0x55, 0x40, &(0x7f0000000240)="4980350d42768077e135a9cb1fa1c8e7d6a5f5f149fe486d0fe7f230f884991b64b15960a05de4404639c10efa7c552d82388728b959ab4d950004b4ec712ec73368a14aaaf096c472a297318c9a68d3e35a2765d0305258c62c4e929e3fed13ee9bd585a56f14e47a2c9ef0f56bfc83402664098c299170484aa334c5687275ed835b7254326a8a5a586bd7d7ca835af474c196cfc8659d1190dcd9a841a1983c7e49ca138b48b1cc12497e1b97c958e152643c0ee3939f299a0cc39bccdbcc2b27fb619d7fdc5c0cd66a1dd5b3b17c4829901067136da29897e2cf896f0a368f1caf", {0x2, 0x3, 0x38414262, 0x2, 0x1000, 0xa20, 0xe, 0x5}}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = dup3(r3, r5, 0x0) ioctl$CAPI_NCCI_GETUNIT(r6, 0x80044327, &(0x7f0000000080)=0x8) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000005580)={@rand_addr, 0x0}, &(0x7f00000055c0)=0x14) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000000)={r8, 0x1, 0x6, @multicast}, 0x10) 03:35:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x400, 0x0) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r5}, 0x18) close(r3) r6 = socket$netlink(0x10, 0x3, 0x9) fadvise64(r6, 0x8, 0x400, 0x1) 03:35:43 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() tkill(r3, 0x33) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) rt_sigqueueinfo(r3, 0x39, &(0x7f0000000000)={0x24, 0x101, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:35:43 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 449.422378][ T27] audit: type=1326 audit(2000000143.889:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17600 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f68a code=0x0 03:35:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}], 0xbb, 0x0, [], 0x2, 0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r5}, 0x18) close(r3) 03:35:44 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '#eth0-p\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x200582, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000000)="8619128e3d08d06a992b1a24992ff70f7c425fbbdf1206ff96b80ffa3d658418075472877cc4643df7d5bfc04e480afe282e4e96ad5e21d0726330d24fbca2bf329882c4b40469a7924ebf74ec2891c8851d1362f6016f2d2ad41e47f7ad745aa0c01ff5f62e10407b0259c05d0122b110de9dacf77fd27f7d7f146cf633f6516697578af1c2db4f2cd99409e100f6c4cb1aa6b41ece94580a9b25", &(0x7f00000000c0)=""/10, &(0x7f0000000100)="19fe4ef6cb31f9f7dc0d0702c4ba70dec21121860ebe38bf3a1cac72bd3a6d4705227afd6660594017e022628a5f0b04aaab591f67eb7f052a", &(0x7f0000000180)="e6b56417e51d23e3aa472813030bb375f70ca965fb5a86373b78f1728086276c427370965a92060be42e29fcbf4e12817620b89d71f7782953dce70deba4f316b820e503f6784f565320a3c9ec0c9a0c5fe8feca913aecb6b7cf204c3a69c8ab908d49d37d20c18e0ce1d089df13d37845dc18a4321d38eae55b87ed", 0x1, r2}, 0x38) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 03:35:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="04000200b34f93b56390b2a6460000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x7d, &(0x7f0000000040)={r3}, 0x8) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x7d, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r3, 0x10000, 0x6, 0x4, 0x8de5, 0x8, 0x2, 0xe5, {r6, @in6={{0xa, 0x4e22, 0x6, @empty, 0x8}}, 0x80000000, 0xe77, 0x9, 0x9, 0x2}}, &(0x7f00000000c0)=0xb0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r8}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) bind$can_j1939(r9, &(0x7f0000000e40)={0x1d, 0x0, 0x0, {0x2}}, 0xfffffffffffffe5e) close(r9) 03:35:44 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x8, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 450.206980][ T27] audit: type=1326 audit(2000000144.669:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17600 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f68a code=0x0 03:35:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$inet(r1, &(0x7f0000000000)="bb8bb4a61e5d047ec03affefe9b46a05a016ba458cf017c04de9476bd6055bd91c6c90bef50041cf34cd9c195013942ac98487ce6387dc40309a7769477173282168b7bf88ad6726db7a6945cb4d2c6c180e4128cee307733eaf3c1480ff1765086bb380a90ec2c7fbcf69ba8e5a4f6bbce5db114204489c631e36ffb46af6306bb6fdef257880bc8ea2465a39a82cfd4b8e602709e0cd97afa4cc144d0cae96d123e00b04668bfe7d800247a6349c15cb769f5ac5851972", 0xb8, 0x24000001, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) close(r3) 03:35:44 executing program 3: chdir(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) write$snddsp(r2, &(0x7f0000001040)="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", 0x1000) r3 = dup(r0) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) fcntl$setlease(r3, 0x400, 0x1) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000000), 0x4) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000ffff0000000004000000"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000020000000c009900050000000300000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff000008000300", @ANYRES32=r5, @ANYBLOB="08001300ee24f4fb5623a5dc6c3c8119e999d5fe052bcf32519cc1984131a465dbf68983834c9fe953d70a904d17b2e16e7fdc84ef70b4f464f591e6d7e9685e74b0886587aaa7ed8485a55112e0a440558650362334e116b5fe14935a8e295b3046b74c1424a360fb", @ANYRES32=r8, @ANYBLOB], 0xb}, 0x1, 0x0, 0x0, 0x400a080}, 0x4080) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16], @ANYRES32, @ANYBLOB="020080000a00f9fffeffffffffff629516ed6614efb03834a441b70320e4f647a77ed9999ae7fddd80d4b5a8858d051a469efb1026206830b81da8f0ed5e9f4edf46e05787417340f4157cc1e2f5130020852afdcfc522346c51c8494e5942f19420b56b8f01559d2120", @ANYRESHEX=r0], 0x4}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 03:35:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x5) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r4}, 0x18) close(r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, 0x18) 03:35:45 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:45 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00', 0x0, 0xc7) 03:35:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:35:45 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2000, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x7d, &(0x7f0000000040)={r7}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={r7, 0x2}, &(0x7f0000000180)=0x8) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0', "ee0ac2ddd8683d0aee036d1cd043cb3bbc0c7e2d349b6a53a6a50e2e8bf19a0da7b41369e3d9f6634384a5b0ec710f61f64770a0bf3dfac0a036ebe1c551c11aed3125df8b4f47d9832659d92891da8265d9261de4aaacac8578a522f4642a45cd14f01db42048d80f3180c7f4d5204b8a16df2ea4ad6f544a10f2443bfcbb"}, 0x83) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:45 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840)='/dev/nvram\x00', 0x620000, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r7) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESOCT=r7, @ANYRES16=r7], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES32=0x0], @ANYRESOCT=0x0]], 0x3}}, 0x80) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) sendto$isdn(r10, &(0x7f0000000100)={0x6, 0xa082, "4b2fdb9c8d9d058d1554c08927bd20b27f07d9df9ca91daadb012f3b1b5d7998b01c9c49efbdbb9032e926feb8c4904ace829c1a717cb2"}, 0x3f, 0x10000000, 0x0, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000180)={0x80000001}) 03:35:45 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) r1 = fcntl$dupfd(r0, 0x203, 0xffffffffffffffff) recvmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000000)=@caif=@util, 0x80, &(0x7f0000000080)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000100)=""/132, 0x84}, {&(0x7f0000000340)=""/122, 0x7a}], 0x4, &(0x7f00000003c0)=""/49, 0x31}, 0x43) 03:35:46 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x11, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:46 executing program 3: chdir(0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @dev}}, 0x1e) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:46 executing program 2: chdir(0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = dup(r0) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) futimesat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', 0x0, 0x0) 03:35:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbfb, {0x1, 0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x60000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x23]}}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff80}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x50814) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 03:35:46 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffbf6295588a7025abfbc58c4d0efaa7e0a64163962d3dbe3770f63d29677b69b12a1e41ff0365c95b9b9732ec476033f278e7161a"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = gettid() tkill(r3, 0x33) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, r3}) syz_open_procfs(r3, &(0x7f0000000240)='timers\x00') socket$pppoe(0x18, 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r5) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x161000, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x0) r7 = dup(r4) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x7f, 0x4) 03:35:46 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {r2, r3+30000000}}, &(0x7f0000000080)) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}}}, 0x24}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r8) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', r7}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0xffffffffffffffc0, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000140)={0x3, r10, 0x1, 0x6}) 03:35:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x21, 0x6, 0x7fffffff) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r5 = socket(0x4, 0x5, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 03:35:46 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:46 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000cb73076718223da8d44dde5ab79e87bd5a72ecba3a72ee81a558d4bf964ec6aca572d187ede2339f71d17703aa8feeab100f7d461a37dfba7cfb81904ad8c202dd862a641320295ed731b2e9edad7c2e9118626197ad78d01a2e672918ed703c586ca8fc4da959f2f6c640510ac5ef953015b62feeaaab21df4eda770f307d5f2927b4c2f99305ef5d13e8"], 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7ff, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x201000, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1000}}], [{@dont_hash='dont_hash'}]}) poll(&(0x7f0000000040)=[{r0, 0x84bb}, {r1, 0x1b4a}, {r3, 0x50}], 0x3, 0x3) 03:35:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r2, 0x2, {0x1, 0xff}, 0xfd}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000e40)={0x1d, r7, 0xffffffffffffffff}, 0x18) 03:35:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00011000f9fff5ffff084000000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 452.555189][T17743] FAULT_INJECTION: forcing a failure. [ 452.555189][T17743] name failslab, interval 1, probability 0, space 0, times 0 [ 452.577568][T17743] CPU: 1 PID: 17743 Comm: syz-executor.2 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 452.587538][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.597607][T17743] Call Trace: [ 452.600923][T17743] dump_stack+0x188/0x20d [ 452.605300][T17743] should_fail.cold+0x5/0x14 [ 452.610174][T17743] ? setup_fault_attr+0x1e0/0x1e0 [ 452.615233][T17743] should_failslab+0x5/0xf [ 452.619677][T17743] kmem_cache_alloc_node_trace+0x27c/0x790 [ 452.625535][T17743] ? lockdep_hardirqs_on+0x417/0x5d0 [ 452.630917][T17743] ? __local_bh_enable_ip+0x159/0x270 [ 452.636335][T17743] __get_vm_area_node+0x126/0x3b0 [ 452.641395][T17743] __vmalloc_node_range+0xdc/0x7a0 [ 452.646536][T17743] ? netlink_sendmsg+0x605/0xe10 [ 452.651512][T17743] ? netlink_sendmsg+0x605/0xe10 [ 452.656467][T17743] vmalloc+0x67/0x80 [ 452.660376][T17743] ? netlink_sendmsg+0x605/0xe10 [ 452.665324][T17743] netlink_sendmsg+0x605/0xe10 [ 452.670108][T17743] ? aa_af_perm+0x260/0x260 [ 452.674629][T17743] ? netlink_unicast+0x740/0x740 [ 452.679591][T17743] ? netlink_unicast+0x740/0x740 [ 452.684570][T17743] sock_sendmsg+0xcf/0x120 [ 452.689124][T17743] sock_no_sendpage+0xf8/0x140 [ 452.693918][T17743] ? sock_kzfree_s+0x60/0x60 [ 452.698670][T17743] ? pipe_wait+0x217/0x240 03:35:47 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:47 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', '\x00'}, 0x0, 0x0) shmget(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) r0 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000340)=""/192) [ 452.703105][T17743] ? pipe_wait+0x1ab/0x240 [ 452.707548][T17743] ? sock_kzfree_s+0x60/0x60 [ 452.712154][T17743] kernel_sendpage+0x82/0xd0 [ 452.716770][T17743] sock_sendpage+0x84/0xa0 [ 452.721210][T17743] ? kernel_sendpage+0xd0/0xd0 [ 452.726063][T17743] pipe_to_sendpage+0x2aa/0x380 [ 452.730937][T17743] ? direct_splice_actor+0x160/0x160 [ 452.736270][T17743] ? splice_from_pipe_next.part.0+0x29c/0x350 [ 452.742426][T17743] __splice_from_pipe+0x3e6/0x7b0 [ 452.747482][T17743] ? direct_splice_actor+0x160/0x160 [ 452.752911][T17743] ? direct_splice_actor+0x160/0x160 [ 452.758222][T17743] splice_from_pipe+0xd9/0x140 [ 452.763521][T17743] ? splice_shrink_spd+0xc0/0xc0 [ 452.768486][T17743] ? security_file_permission+0x8a/0x370 [ 452.774146][T17743] ? splice_from_pipe+0x140/0x140 [ 452.779193][T17743] do_splice+0xb0b/0x1520 [ 452.783529][T17743] ? __fget_files+0x329/0x4f0 [ 452.788237][T17743] ? do_dup2+0x520/0x520 [ 452.792491][T17743] ? __sb_end_write+0x101/0x1d0 [ 452.797361][T17743] ? opipe_prep.part.0+0x2f0/0x2f0 [ 452.802506][T17743] __x64_sys_splice+0x2b5/0x320 [ 452.807424][T17743] do_syscall_64+0xf6/0x790 [ 452.811976][T17743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.817883][T17743] RIP: 0033:0x45c849 [ 452.821795][T17743] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.841556][T17743] RSP: 002b:00007fd42a497c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 452.850070][T17743] RAX: ffffffffffffffda RBX: 00007fd42a4986d4 RCX: 000000000045c849 [ 452.858059][T17743] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 452.867103][T17743] RBP: 000000000076bf00 R08: 0000001420000a77 R09: 0000000000000000 [ 452.875115][T17743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 452.883105][T17743] R13: 0000000000000ba2 R14: 00000000004ce68a R15: 0000000000000000 03:35:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = accept$ax25(r2, &(0x7f0000000080)={{0x3, @null}, [@default, @netrom, @remote, @default, @bcast, @bcast, @rose, @rose]}, &(0x7f0000000180)=0x48) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000280)) ioctl(r0, 0x81e, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0x2}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) 03:35:47 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000240)={0x80000000, 0x0, "4e4fce1e7ca5cd5a732855dde5e0ab7aaf94d3543301658c0cd68b64978edf76", 0x200, 0x1, 0x7, 0x3ff, 0x9, 0x1, 0x7e, 0x7, [0xa2d, 0x7d1, 0x6, 0x100]}) 03:35:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r3 = dup(r2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) dup(0xffffffffffffffff) io_submit(0x0, 0x0, &(0x7f0000001300)) dup(0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00010000f9ff00001f0000070000003b0700000000000000c8ed783b22feb03cb50a2927d2296d55e79169b411c06d350022b4bcfeb0302fbe907305719eebf4eb791731f5fea6e978a45dd8df0a8d78f51a4e0d501fe3c3a92cb3c7aadf52d8f194457eda3ca0c69d8b97c13e21c12656e8bc022de0396c2ab44aaf8d0e097b1e5562b303810a88f6fcfa10d33e05c4040ee9a46e8683925946dea84e50bd26e2a5ca6b1e1b92899a44d8f3902e87e5afec4535ecb24ec44f52780d984aa32786a112c9f58d522755ba8e7a8de24cc923b38b898baf4726d5bc7b036f85359d20ab4a63995f", @ANYRES32, @ANYRESOCT=r7, @ANYRES16=r5, @ANYRESDEC=r2], 0x5}}, 0x4001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) r10 = socket(0x1, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x332, 0x0) 03:35:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:35:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) sendmsg$AUDIT_USER(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x1010, 0x3ed, 0xfc373df5f1b63772, 0x70bd2c, 0x25dfdbfc, "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", ["", "", "", "", "", "", ""]}, 0x1010}}, 0xc000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xfc, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x84dc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x15a9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb10}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x82}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x8044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e0000f9ff0000000000070000000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = socket$inet6(0xa, 0x3, 0x80) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000400)={0x1, 0x400, 0x6}) [ 453.530862][T17743] syz-executor.2: vmalloc: allocation failure: 4416 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 453.618686][T17743] CPU: 0 PID: 17743 Comm: syz-executor.2 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 453.629148][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.639216][T17743] Call Trace: [ 453.642535][T17743] dump_stack+0x188/0x20d [ 453.646892][T17743] warn_alloc.cold+0x87/0x164 [ 453.651589][T17743] ? zone_watermark_ok_safe+0x260/0x260 [ 453.657171][T17743] ? __local_bh_enable_ip+0x159/0x270 [ 453.662576][T17743] ? __get_vm_area_node+0x2e2/0x3b0 [ 453.667806][T17743] __vmalloc_node_range+0x452/0x7a0 [ 453.673054][T17743] ? netlink_sendmsg+0x605/0xe10 [ 453.678018][T17743] vmalloc+0x67/0x80 [ 453.681933][T17743] ? netlink_sendmsg+0x605/0xe10 [ 453.686935][T17743] netlink_sendmsg+0x605/0xe10 [ 453.691752][T17743] ? aa_af_perm+0x260/0x260 [ 453.696274][T17743] ? netlink_unicast+0x740/0x740 [ 453.701235][T17743] ? netlink_unicast+0x740/0x740 [ 453.706190][T17743] sock_sendmsg+0xcf/0x120 [ 453.710627][T17743] sock_no_sendpage+0xf8/0x140 [ 453.715406][T17743] ? sock_kzfree_s+0x60/0x60 [ 453.720032][T17743] ? pipe_wait+0x217/0x240 [ 453.724474][T17743] ? pipe_wait+0x1ab/0x240 [ 453.728941][T17743] ? sock_kzfree_s+0x60/0x60 [ 453.733554][T17743] kernel_sendpage+0x82/0xd0 [ 453.738165][T17743] sock_sendpage+0x84/0xa0 [ 453.742612][T17743] ? kernel_sendpage+0xd0/0xd0 [ 453.747393][T17743] pipe_to_sendpage+0x2aa/0x380 [ 453.752413][T17743] ? direct_splice_actor+0x160/0x160 [ 453.757973][T17743] ? splice_from_pipe_next.part.0+0x29c/0x350 [ 453.764072][T17743] __splice_from_pipe+0x3e6/0x7b0 [ 453.769161][T17743] ? direct_splice_actor+0x160/0x160 [ 453.774472][T17743] ? direct_splice_actor+0x160/0x160 [ 453.779785][T17743] splice_from_pipe+0xd9/0x140 [ 453.784573][T17743] ? splice_shrink_spd+0xc0/0xc0 [ 453.789543][T17743] ? security_file_permission+0x8a/0x370 [ 453.795201][T17743] ? splice_from_pipe+0x140/0x140 [ 453.800243][T17743] do_splice+0xb0b/0x1520 [ 453.804587][T17743] ? __fget_files+0x329/0x4f0 [ 453.809285][T17743] ? do_dup2+0x520/0x520 [ 453.813541][T17743] ? __sb_end_write+0x101/0x1d0 [ 453.818413][T17743] ? opipe_prep.part.0+0x2f0/0x2f0 [ 453.823667][T17743] __x64_sys_splice+0x2b5/0x320 [ 453.828608][T17743] do_syscall_64+0xf6/0x790 [ 453.833921][T17743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.842903][T17743] RIP: 0033:0x45c849 [ 453.847509][T17743] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:35:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, 0x0, 0x2}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = socket(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x7d, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000000)={r8, 0x8000, 0x0, 0x8}, &(0x7f0000000040)=0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) [ 453.867298][T17743] RSP: 002b:00007fd42a497c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 453.875729][T17743] RAX: ffffffffffffffda RBX: 00007fd42a4986d4 RCX: 000000000045c849 [ 453.883732][T17743] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 453.891719][T17743] RBP: 000000000076bf00 R08: 0000001420000a77 R09: 0000000000000000 [ 453.899876][T17743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 453.907858][T17743] R13: 0000000000000ba2 R14: 00000000004ce68a R15: 0000000000000000 [ 454.786140][T17743] Mem-Info: [ 454.812828][T17743] active_anon:200058 inactive_anon:220 isolated_anon:0 [ 454.812828][T17743] active_file:8108 inactive_file:55928 isolated_file:0 [ 454.812828][T17743] unevictable:0 dirty:188 writeback:0 unstable:0 [ 454.812828][T17743] slab_reclaimable:15900 slab_unreclaimable:101675 [ 454.812828][T17743] mapped:61219 shmem:310 pagetables:1526 bounce:0 [ 454.812828][T17743] free:1009332 free_pcp:670 free_cma:0 [ 454.899666][T17743] Node 0 active_anon:800232kB inactive_anon:880kB active_file:32296kB inactive_file:223712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244876kB dirty:748kB writeback:0kB shmem:1240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 729088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 455.015355][T17743] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 455.085283][T17743] Node 0 DMA free:10344kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:5564kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.196229][T17743] lowmem_reserve[]: 0 2519 2519 2519 2519 [ 455.310643][T17743] Node 0 DMA32 free:262492kB min:35952kB low:44940kB high:53928kB reserved_highatomic:0KB active_anon:794768kB inactive_anon:880kB active_file:32296kB inactive_file:223712kB unevictable:0kB writepending:748kB present:3129332kB managed:2582576kB mlocked:0kB kernel_stack:8784kB pagetables:5956kB bounce:0kB free_pcp:1840kB local_pcp:1224kB free_cma:0kB [ 455.414567][T17743] lowmem_reserve[]: 0 0 0 0 0 [ 455.419391][T17743] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.550648][T17743] lowmem_reserve[]: 0 0 0 0 0 [ 455.620661][T17743] Node 1 Normal free:3767132kB min:53936kB low:67420kB high:80904kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 455.722927][T17743] lowmem_reserve[]: 0 0 0 0 0 [ 455.733046][T17743] Node 0 DMA: 2*4kB (UM) 0*8kB 0*16kB 3*32kB (UM) 2*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (M) 1*1024kB (U) 0*2048kB 2*4096kB (UM) = 10344kB [ 455.809045][T17743] Node 0 DMA32: 3902*4kB (UME) 479*8kB (UE) 429*16kB (UME) 728*32kB (UE) 530*64kB (UE) 262*128kB (UME) 151*256kB (UME) 110*512kB (U) 44*1024kB (U) 2*2048kB (M) 0*4096kB = 261184kB [ 455.857412][T17743] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 455.895069][T17743] Node 1 Normal: 41*4kB (UME) 102*8kB (UME) 180*16kB (UME) 88*32kB (UME) 49*64kB (UM) 26*128kB (UME) 15*256kB (U) 11*512kB (U) 7*1024kB (UM) 5*2048kB (UM) 910*4096kB (UM) = 3767380kB [ 455.946732][T17743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.982777][T17743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 456.240785][T17743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.258857][T17743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 456.288793][T17743] 49038 total pagecache pages [ 456.300388][T17743] 0 pages in swap cache [ 456.309044][T17743] Swap cache stats: add 0, delete 0, find 0/0 [ 456.329303][T17743] Free swap = 0kB [ 456.349522][T17743] Total swap = 0kB [ 456.358101][T17743] 1965979 pages RAM [ 456.365444][T17743] 0 pages HighMem/MovableOnly [ 456.370196][T17743] 348808 pages reserved [ 456.410658][T17743] 0 pages cma reserved 03:35:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:50 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @loopback}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x18, &(0x7f0000000100)={@loopback, @local}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0x0, @dev}, r5}}, 0x48) r6 = gettid() tkill(r6, 0x33) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, r6}) ioprio_get$pid(0x2, r6) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r5, 0x2c, "6b17a9", "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"}}, 0x110) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) 03:35:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) io_uring_enter(r2, 0x3ff, 0x9, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() tkill(r4, 0x33) fcntl$setownex(r3, 0xf, &(0x7f0000000000)={0x0, r4}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x50, 0xe8, 0x4, 0xa4, 0x0, 0x6, 0x10800, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x142, 0x3, 0x6, 0x9, 0x1, 0xa82, 0x401}, r4, 0xe, 0xffffffffffffffff, 0x1c) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 03:35:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001a835a35f66d5842524a64c8d3a9d49de53c3b310a058b95d576dc338938a33f", @ANYRES16=0x0, @ANYBLOB="010025bd7000fedbdf2504000000140007002f7573722f7362696e2f637570736400050001000000000014000300fe800000000000000000000000000010"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_newneigh={0x88, 0x1c, 0x0, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r10, 0x20, 0x3a, 0x1}, [@NDA_PROBES={0x8, 0x4, 0x200}, @NDA_SRC_VNI={0x8, 0xb, 0x2}, @NDA_PROBES={0x8, 0x4, 0x80000000}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x2, 0x101, 0x8}}, @NDA_PROBES={0x8, 0x4, 0x9}, @NDA_VNI={0x8}, @NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r11, 0xffffffffffffffff}, 0x18) 03:35:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@rand_addr="18da3d67b3851f09ae8a9ce86b40deaa", 0x1b, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000062959dfec1592416edcac06a008e48828a3092b4dcbbecbc4ff00511bb15e9baf720145601c923a820287d4e0fbcdc961ab12245121ae8e7c4f7ff22e646aff502c251ef4e11a35f66eb96b9fca314a4b8636b00be20eb565254a389f0dbcfa9b1adbace96a1d5e615"], 0x28}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 03:35:51 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 03:35:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x301000, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, r8, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r10, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0x434, 0x3f3, 0x8, 0x70bd26, 0x25dfdbfd, {0x4, 0x0, 0x16, [0x637b, 0x2, 0x0, 0x465, 0x80, 0x101, 0x8, 0x6, 0x7, 0x20, 0x0, 0x3, 0x5, 0x8, 0x9, 0x80000000, 0x4, 0x3ff, 0x5, 0xe7, 0xfffffc00, 0x6, 0x6, 0x1, 0x80000000, 0x80000001, 0x8, 0x5, 0x8000, 0x6, 0x724, 0xc8d6, 0x80000000, 0x5, 0x0, 0x8, 0x1, 0x6f, 0x80, 0x13, 0x4, 0x9, 0x7, 0x4, 0x4, 0xffff, 0x9d, 0x8, 0xf1, 0x1, 0xffff, 0x7fffffff, 0x7, 0x9, 0x5, 0x4, 0x0, 0x8, 0x4, 0x10001, 0xe0000000, 0x2, 0x2, 0x8], [0x7, 0x8, 0x4, 0x4, 0x6, 0x4, 0x401, 0x2, 0x2, 0x7fffffff, 0x2, 0x3, 0xfff, 0x8, 0x101, 0xfffffffd, 0xeb8b, 0x10001, 0x80, 0x4, 0x1, 0x11, 0x3ff, 0x0, 0xfffffff9, 0xca6, 0x401, 0x3, 0x70a, 0x4, 0x240000, 0xffff, 0x0, 0x7fffffff, 0x400, 0x5, 0xfffffff7, 0x5, 0x1, 0x4a, 0x4, 0x7, 0x6, 0x7fff, 0x1ff, 0xff2, 0x1, 0x4, 0x10001, 0x0, 0x1, 0x0, 0x200, 0xffffffff, 0x2, 0x9, 0xffffffff, 0x2, 0xfff, 0x1, 0x800, 0x5, 0x1, 0x9], [0xe4, 0x1ff, 0x8001, 0x2, 0x7, 0x9, 0x800, 0x90, 0x80000001, 0x6, 0x100, 0x2e, 0x29d, 0xe84, 0x6f08, 0x8, 0x4, 0xd91, 0x202b, 0x2, 0x5, 0x9, 0x8, 0xffffff80, 0x8000, 0x9, 0x8, 0x9, 0x80000000, 0x20, 0x2, 0x7fff, 0x80, 0x40, 0x9, 0x3f, 0x68fa, 0x0, 0xa31e, 0x5, 0x3, 0x3, 0x0, 0x401, 0x7ff, 0x0, 0x6, 0x1, 0xb0, 0x7, 0x2, 0x7fffffff, 0x8, 0x0, 0x9, 0x6, 0x2, 0x80000001, 0x7, 0x2, 0x6, 0x5, 0x0, 0x2], [0x3, 0x80000000, 0xfffffffb, 0x6, 0x8, 0xfffffffb, 0x9, 0x8, 0x0, 0x2, 0xfffffff7, 0x8, 0x1, 0x8000, 0x2, 0x2, 0x2437, 0x5, 0xfc88, 0x2, 0x1, 0x8c, 0xef, 0x5, 0x9, 0x3ff, 0xffffffff, 0x10000, 0x800, 0x9, 0x40000000, 0x7fffffff, 0x8000, 0x3, 0x2, 0x422, 0xbf, 0xffffffff, 0x25b, 0xfff, 0x3f, 0x3, 0xffff, 0x1, 0x2, 0x40, 0x80000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x45, 0x7f, 0x9, 0x1, 0x7fff, 0x5, 0x80, 0xffffffff, 0xfffffe01, 0x7f, 0x7, 0x1], 0x13, ['vcan0\x00', 'vcan0\x00', 'TIPCv2\x00']}, ["", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0xc800}, 0x4040) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0xff, 0x0, 0xd20d}]}, 0x10) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r8, @ANYBLOB="00042bbd7000fbdbdf25120000008400028008000100080000000800010000080000080001000180005c8d862a52000c00038008000200010000005400038008000100c10000000800301683e697e058ebd9bbe402000800000008000100a40a000008000200df000000080002002b0100000800010048a7000008000200bc000000080001008300000008000200fdffffff080002003f000000080001006c00000014000380080002000600000008000200000000000c"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) 03:35:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$UHID_INPUT(r1, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0xb1b, @rand_addr="62fa65922db223ab70134d0bdeaf7c41", 0x56446df3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r5, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) write$P9_ROPEN(r4, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x20, 0x4, 0x2}, 0x400}}, 0x18) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r10, 0xffffffffffffffff}, 0x18) 03:35:51 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:51 executing program 3: chdir(0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$afs(&(0x7f0000000240)='afs\x00', &(0x7f0000000280)='./file0/file0\x00', 0x9, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="fbc2740e7a7c1b84f808e7ce4b8dc3e62f32a84948a37dcdf1ad1fb84268139a1a4a527f9ceb79bc2752615f208274b14fe95a9ac8c6647324deab20d8ff6b3396a2d64b23c999060449b526a1c903ca1362315aee06ad0fd46178eb98fe72b45c5ee12bf78b82932b8a9e5ba5c9dace95638b947cf84a4a4d6df0", 0x7b, 0x2}, {&(0x7f0000000340)="316683b84607f8f572c432b611e24a598db2c035eea7a3c7973e30deb69db2a4982c156bd73503972f13db8ac71bedc9a51bd82b99959b", 0x37, 0x1}], 0x40, &(0x7f00000003c0)={[{@dyn='dyn'}, {@flock_local='flock=local'}, {@source={'source'}}, {@flock_strict='flock=strict'}, {@flock_strict='flock=strict'}, {@flock_openafs='flock=openafs'}, {@autocell='autocell'}], [{@dont_measure='dont_measure'}, {@audit='audit'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff7}}, {@uid_eq={'uid', 0x3d, r2}}, {@euid_eq={'euid', 0x3d, r4}}]}) r5 = dup(r0) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x4e22, @remote}}}, 0x88) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) accept$unix(r5, 0x0, &(0x7f0000000080)) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) 03:35:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket(0x4, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0xa, 0x2000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}}}, 0x24}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(0xffffffffffffffff) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r6, 0x2, {0x0, 0x1, 0x4}, 0x1}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) 03:35:52 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:35:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="00feffffffffff629500000400000000"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:52 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:35:52 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r8, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd9a}]}, 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4804}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) 03:35:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[0x5, 0x8, 0xe7fa4291, 0x6, 0x1]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:52 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x91c9c1a7c813944f, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600540430e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', r4}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) close(r0) 03:35:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000000)={0x1, 0xe6, 0x4, 0x1, 0x6}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:35:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x3) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', r8}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r9, 0x2}, 0x18) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000e40)={0x1d, r12, 0xffffffffffffffff}, 0x18) 03:35:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400080, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r6, 0x2, {0x0, 0x9e329aa1677d6659, 0x1}, 0x1}, 0x18) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) bind$can_j1939(r10, &(0x7f0000000180)={0x1d, r8, 0xffffffffffffffff, {0x0, 0x0, 0x4}, 0x2}, 0x18) close(r0) 03:35:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000033f10a00f9ff15f8ffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) r4 = dup(r3) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0xffffffffffffff20) close(r1) 03:35:53 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl(r1, 0x1000008912, &(0x7f0000000140)="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") r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000e40)={0x1d, r4, 0x2}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet6(0xa, 0x0, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000e40)={0x1d, r7, 0xffffffffffffffff}, 0x18) 03:35:53 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1020, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)={0x6a, 0xb, 0x4, 0x70000, 0x3, {}, {0x3, 0x1, 0x40, 0x80, 0x1f, 0xa5, "e82f6d0a"}, 0x10000, 0x4, @userptr=0x2, 0x401, 0x0, r2}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, r4, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xb0, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe49d}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4a}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x43}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2081}, 0x8010) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 03:35:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240f00002800270d0000001e000000fdff00000042f44ccd683f5c07b7055facff93859e3e789ccfebd5cd74a1ba31f6abbd42aa100aa718712c537f28c86c03dc9634f019829d815a6bebd177c5ee22df44496c8b377851a63bb5b9b20cd140a122607f6e2eeba09486f0a9bda014ee5c7f08aa9dcf51bd470389e1b3685a8240815aeeab73f9f5cb2154e97cb2ac04788dd8554b08bdd0eb3ea6c2cb4d7a5c2ea836b1c164b123a90499a5ee400af09b4c4d26fe6bd0775ffb5fc4bcd57dbb054690fdc70dbf5051a45820cf9bea180c8d6944", @ANYRES32=r4, @ANYBLOB="0000ffff0000000000000000"], 0x24}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xffffffffffffffad) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', r10}) ioctl$RTC_VL_CLR(r6, 0x7014) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r11, 0x0, {}, 0xfe}, 0x18) close(r0) 03:35:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0x1, {0x2, 0xf0, 0x1}, 0xfd}, 0x18) 03:35:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5d4cf8c9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) setsockopt$inet_buf(r6, 0x0, 0x25, &(0x7f0000000040)="29e8db6964583ecefb683e6d2433dc1fc9218a77dfbebd2e79a81ac330a850d8f35d74e695fc0ae5578da3a4017463345858f24ec2c6b9b55dcdadf4de6f70e89e938abae7aaa0743cbb5742384045e37a4e541a75fa0354a4afc64df386239935ed0ced11dd06ee59f590a460d4828843ed972129614a97de0ea6d56e9c047e", 0x80) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x8000, 0x4, 0x4, 0x20, 0x9, {r7, r8/1000+30000}, {0x4, 0x2, 0x2, 0x40, 0xc9, 0xfc, "59059367"}, 0x9, 0x4, @userptr=0x8, 0x3, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25SCAUSEDIAG(r9, 0x89ec, &(0x7f0000000180)={0xf7}) close(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 03:35:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) getpeername$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={0x1d, r3, 0x1, {0x1, 0x1}}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x81) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x804}, 0x44050) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r5, 0x0, {0x2, 0xff, 0x2}}, 0x18) 03:35:54 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = dup(0xffffffffffffffff) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000024c0)) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'netpci0\x00', {'wg0\x00'}, 0x2}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioprio_get$uid(0x0, 0x0) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000080)={0x8, 0xffe0, 0xffff, @broadcast, 'dummy0\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e0001000000000000100000000000007bd983d139d5a8420480199bc47f36e06f93bb8dbf6cbf785647012f6e15f5e1ac74ac487c15d5ebdba96bb94850f7a4921531bf30c89fd0fa140d4123ad93de772592904fcdffdc265c4d25818ecb185fd5e4a7d448a67403201aed31627a8ff25ffb28dea1d28f8376b09dcc64591580eea9163e3561961e19dc1ed6f5a47c95a038340e7f871443b5340d432c8c5858cc259ec39e62cc9287456a88e5f942cff74644fc6c3c30449aacd6e04af63305687498afb1e995b9885290ff662db479d683bfdd8df5d7b08eac6295b582fd3255dc79721ed81284b0", @ANYRES32, @ANYRESHEX=r6], 0x3}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 03:35:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x3, {0x0, 0xff}}, 0x18) close(r0) 03:35:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="010000006924ec4b1e698fe847a008000000000000") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x10) close(r3) 03:35:54 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1040, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x20000, 0x0) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="0100000000000000000012000600000006800c098644835e139b2ee1c37a142d36b1f880135d1a0a8d2fb659e5f87c7d7273bdb3bee5767e56b20ed22b9e04e025e2c453b16e7496220a94e2ac9d040bca86a781fe1e1491f871386dbc579d5eb37c2108f56b14a66fab58d09997176e28af41f9c8f664fb7273f25d211c37333111b51904e4bb5801b5ba470ee272a2700a7886163fabf9bb9126a784920f3b7d69cbf1da8795174e3dc25a02abd73e8f77bc1fa0ae3f4e55a831a155e099e2fb4740db122798fb2e58f0ca8750723dbafc2ef1bcb1ca5f121ff95595379ce5b35ff76830912947b19c4a3d73b66ba4427c8c41fe66e6"], 0x3}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="c4020000", @ANYRES16=r5, @ANYBLOB="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"], 0x2c4}}, 0x50) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r9) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x30, 0x33, 0x12, 0x11, 0x5, 0x10, 0x6, 0xa4, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0xff, 0x9, 0x4, 0x0, 0x3, {r7, r8/1000+10000}, {0x4, 0x2, 0x6, 0x88, 0x0, 0x8, "6942b4e8"}, 0x4, 0x1, @userptr=0x3, 0x9, 0x0, r9}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000600)=0x8) 03:35:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) close(r0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000000)=""/241) 03:35:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000040)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], 0x0, &(0x7f0000000080)=[0x0], 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB="fcff80000a00f9fffeffffffffff629588bb530b5992e34763540bbbddd0728ad1fdaa0bfa22fde3950859ddf59638b76ad37f399ece2bb7d1dc6e13853bbde6d0c991616993dfb92c5adb79d8a08fb0e5f226321aa74ece92bdd52de37b4c7297667235be66393c97fb4100c6d9c3f1edb859ecba5d7ebdde5ee3b6fea30c1f56ddda94dc31d270c85ff144ede21495eea96acee9f2320eec7adb3a4d"], 0x3}}, 0x24000000) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) r6 = getgid() getgroups(0x2, &(0x7f0000000100)=[0xee00, r6]) 03:35:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x181041, 0x0) fcntl$addseals(r7, 0x409, 0x3) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:55 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="ee0000007a7b153eaa6593577b8c68d122545807f6575114240c100e16d1579e9114c130e181b0f8327b0bf7daa94d30d5002afd7b3222f352f8bb564b7240ce06a34e27e2da75031ccdc6420c43eeaddc6ad830a4f39c6efbe64fe176612fb5406203540c573ebd4848a7078112284ecbe96661e9a885ed214ea678b971715f47d568a7f03cceaa3e282abec1f4e86b369d33f64f89e69a9ffd57b3f6a124bd502ec3e824baa147d695bb6011ac240f05fad63a315ff2000943f92d430f862595c5c5545ce905f8eec5d91cd0fed122fc09b70482eea6d7c0f5a7fdb5551a500a35491926196da1f16b25aeb0db82c12ac8"], &(0x7f0000000240)=0xf6) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={r5, 0x5d24}, 0x8) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/input/mice\x00', 0x200200) accept4$tipc(r6, &(0x7f0000000180)=@name, &(0x7f0000000200)=0x10, 0x800) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) ioctl$EVIOCSABS3F(r8, 0x401845ff, &(0x7f0000000000)={0x4, 0x38, 0x40403, 0x4, 0xfffffffd, 0xffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000100)={r11, 0xf7a2}, 0x8) 03:35:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xf0, 0x200000) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x0, r8}) close(r0) 03:35:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1041, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xa) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl(r0, 0x8907, &(0x7f0000000080)="080db5055e0bcfe847a07185a29e683f99e325223d835120778bba6f57b5a4559915fffe3532b9297d352446d91eabf7f1f1bd8b196d79e104dbbd06ab88ab159fd566f952f1c3abe459c4eed957fd52093584e309c7822408cc761c79abcf9b9185176ca2567f197b5a0640dd000000000000000000") r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}}, 0x801) bind$can_j1939(r2, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000000)=0x5) 03:35:56 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x81, 0x400, 0x8, 0x6, 0x29, "cc793d186117128a3931118e037a7d53501783", 0x0, 0x12}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0x89, &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x2, 0x304, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000100), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x3, 0x7, 'bridge_slave_0\x00', 'veth1_vlan\x00', 'geneve1\x00', 'dummy0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff], 0x6e, 0xf6, 0x126, [], [@common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @common=@log={'log\x00', 0x28, {{0x18, "325ad8ad9381df58ac4ce7c2091d3eb04aab37321ca40d22e57751dfc19a", 0xb}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x9, 0x14, 0x8137, 'veth1_to_bond\x00', 'team_slave_0\x00', 'veth1_virt_wifi\x00', 'nr0\x00', @broadcast, [0x0, 0x79fdabf9a3ceb856, 0x0, 0xff, 0xff], @random="2ce8494e0105", [0x0, 0x0, 0x0, 0xff], 0x116, 0x116, 0x14e, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'macvlan0\x00', {}, 'ipvlan1\x00', {}, 0x4, 0x2}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0xfffffffc, 0xb7e, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x37c) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="009708d400050085000000"], 0x1c}}, 0x800) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000001c0)={0x55, 0x218, 0x6, {0xe68, 0x2}, {0x1, 0x8}, @cond=[{0x20, 0xd4a, 0x4000, 0x0, 0x5487, 0x3}, {0x0, 0xc2, 0x7, 0xe2, 0xa1, 0x56}]}) 03:35:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) r3 = fcntl$dupfd(r1, 0x406, r0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfa}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000280)={0x9, 0x8000, 0x4, 0x1, 0x80000001, 0xfffffffa}) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x8003, 0x8020001) getresuid(&(0x7f0000001bc0)=0x0, &(0x7f0000001c00), &(0x7f0000001c40)) fstat(r6, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000004c0)="8f07709996cbf80e5e88aa31cf9719728fe5332f47ca662c85685864b9476c884beed4c79ff74b47b9223cc39d26ac00171383790108f402fd91bb60260bd5b680eb40c10b6055f31a4d88f47f817d0c59f4ea31ccf114b1a9c98748378fa345a481cae9230bb707bfe202b16e092fcc63be9a0a35c319d1fc5c0ec791b994432d1c", 0x82}, {&(0x7f0000001580)="4482fd863a80be2dc974c8ce15242062d6d6c74d7210fe6a512a605cd900563141182a853f57cea80014bd98bd5433d540d997cba586f57295674bede6d9d65fa842d809df0d52f68bd938b7b11117c2a22bbd882649c80b1ebc0831e4cb2671e8bd2661c55e6bcc93ff4d0a459065a7d2ada2c4c79c29d3c6e19536d461eb1b1c8baa2c708e159aba2f086833c3a457a6781e29d7baa9541f7fb82d884da0c87b66123850835b5a5ca958bc9bd0dfbfea81763c068ffd29f2", 0xb9}, {&(0x7f0000001640)="492985887ae18e68b5a55c71a9511b817824b3dae574645e1b79db40b1bb37a3ff03f82d59bac54e869f895d2fd92625c104b55ba3cd5cd42c64fb4d437dc8ca1a2199da8727b3a956e679f52f56dbeac362d78f6d833d25fa35c1e8400e", 0x5e}, {&(0x7f00000016c0)="7092f52985ea07bf2af866f64ac303118035b4781f842c1100b3a31846d7c5246d44f00800dadf3fe958916e3bd97702817830ed7370376420d3a9affe140981615870e3be36c7c87a497742017fbfd2172b08e4291a5e2e0706afb32c1226e952014d871d148955aec86660a35d1ba2dd7989cc4d49870eece033403ee4b5112d805e11c3c4d26ef3488d4b2b20f81de31c723a8b62af69b57e", 0x9a}, {&(0x7f0000000240)="431cc1386e1e952eb2934ed097ee66eac96924b3c1122907", 0x18}, {&(0x7f00000002c0)="a81dadeec5b850fd14c60920725210fb6556", 0x12}, {&(0x7f0000001780)="23159bd719e313cf61bb30751b969df524b8cba9bb0c32a47cb3cd4134f8e5687410df8b7f4f08bdc2cc161c8645b4cd69cff506fbef69cfa2a73d6897dad4d433abc626e1f8ce50e48ca92367fe1ff879eef8fa1d0b6692bfe16c8c0fa6db498ea7c6dec7275150e8c2e3989c365102d8aa71069ef577bbef7ba9c4bbadc6d6952eb0bc55016c4f6fbb0ca94d6da6aced8bb02701233d3b5afd3b8d65c9d8fa69c3f0b2da9cb09e76d4841cab8f006d03ea718974aa4d6c58acc7408ceefba2932831bf66889a0a1d", 0xc9}, {&(0x7f0000001880)="7fce378ec5358e20f8ca1885100a19f578bc9ac33a5797f550d806b2cd88c477b48a92e58ac5fa63ad632868bb01da48bfa4783b7f8b0210af6f7b028654d34a6b51ac907c658199b82cd36482909d0fc2a9ff9d3f0e1a27ab80bc658878d8f7e960a1699950cdd6a8461ffbf043ac07b883c472c263d01bcdcaf0eabb3162f5f56d0e33eed98b4fb4cad9bcffff51c182d0085c7c3742069c53a7217a41ab29d676705d8e9e4d5a7a2060c75e63469369f01ec35ebe008eef2df454e98d5a1e58cbbeb39bc3152c65b56506", 0xcc}], 0x8, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0x80, 0x8010}, 0x40001) getgroups(0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, r8]) fchown(0xffffffffffffffff, 0x0, r9) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f00000001c0)={0x200000, 0x9, 0x2, 0x7ff, 0x0, 0x6}) r10 = socket(0x1e, 0x3, 0xd3) sendmmsg$alg(r10, &(0x7f0000000140), 0x332, 0x0) [ 461.938694][T18068] QAT: Invalid ioctl 03:35:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x5, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x3) connect$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x6, 0x8, 0xe0, "5298fd99a365d2f40f87ab54c9fad50b88aef6a419b323f790489658d45c7066fb73dfe68c3e5a4359f2ea8086e14d465ecdfe608d697082648a864da5b476", 0x3a}, 0x60) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="0000f9fffeffffffffff6295000000002815edd9e7e4d6256d78e9a17acc1bf74c2185b7c0dbbae590d6b3d3fee6cca60093158810b0bcf4078c88354dfb6f7e76def2f7152495c3c1d7d5c53bec9534d0b33c8c2a33e31886680ddd1654815fc96f88d2e5b9aa469f081866ee8f02887429f96e1511fc28013656b535422af883beb516df5b117c9aaf2d39aef119be355f7c642d4257f2bf281f086dcf426b3ed5df4b20e07c0f86b17fbfa747947c04583a4a3fdb1f007feaf20e989737a939620fcba06bbf7272830d65090f31b8fc2fe05b6fdf38b5c2933302fc49d41ff9647606f5858e0080ffffffffffffd18d80997228d1814c19"], 0x28}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x8) 03:35:56 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @reserved="b430ced5d906de3e1c3e44add0a40bd831e705674fe5e49820651d8c352892f4"}}) r1 = socket$inet(0x2, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000040)={r4}, 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000b80)={r4, 0x0, 0x7, 0x8}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0xa, &(0x7f0000000880)=[{&(0x7f00000000c0)="7575facfa63df7ed5e080ce5295ff5411d40ed2796b7ea07430e1129e591dad57611ed0db4bdf6ccede5fd52e5bacbbac40ebf13cf7921078bb7d3de33d9a1e0c1b84372c0a1d4c5fd1a35cb5895b7e26c893ff98feae55bfc0f00"/105, 0x69, 0x3f}, {&(0x7f0000000140)="f9253008924d448a1c47ce44de31e90e4d66d484cd0f20fb3c35111c6ded771b009083c4b108836441be52e86c8d8d34ef65564146e5979a23a3cb397accf8e0d7293ebb8f25d6c57cc199959f155ccccb334c0e64bcbcd912e23823993e01a619dc6b19b52455f3c842415f5a8495ec64bffe77d1bee490c016027be1d96062dd733070f431e7e882f3ad7d228daf181af98f2a05c27727f6bf0cb4c06fd129dae845110de05c5b3c88940578a7f3e9bcedb59cbd3f103be968fc6d786c52aba09741d9da6b14201301d0444b11b2ef0216957a1548ad733b3ef069d654d9a43a7499a6179152", 0xe7, 0x1000}, {&(0x7f0000000240)="538e2f18b8dd4a8f10c39593fd080c9898fce22914de3c27ca67341150ba6ec90372de03195273bae9d05922f03c945f4d8361300af0b1fc27bab52a3643ea44772d5499b7047bac0b982cefbcdb6abefc5761ea950e474d7063", 0x5a, 0x1f}, {&(0x7f0000000340)="6747715b0c64bcf3ed88ea35c1f7353d86f282d1df8bb82e2b6cefe305a5b3dd9133602f068cdb841faeb0eabbadb27ba2fd3e99a55eba376681a8104db31ed36bd67be10187e057efd79dfdc6f6fb93ace937f3f25ba180bcb6e782fa3596ff1623ca3c478fc4ce268c20296d91b159ce7d381c4517e17416a0eeab975b9dc32f3cdd484f4c4693a1b42fb8ac38b79007690ec5a3916494b0d24cc9d374e0b29193759a5f2a495e809869a86a82e9451920fbec5bb8f6546f697419faa54cbad8f601c4397956ce842c2c9c534e42fa38b0533420a0a49c13e6fffba82fc6a568bbc1c38f2f", 0xe6, 0x2}, {&(0x7f0000000440)="0419021997d23a4604a1500f5c451b644de73dbde6a42d4f5c9b35936c157eec29882b78b48bfc77543301d11e71f98327ccba0a96127e0d149cd49b19e40ae49529788e99b6c471c4dfc4f0ad3be4d92004f4c28795d9bc4829f4b132", 0x5d, 0x5e2}, {&(0x7f00000004c0)="5dc32176f6053469c9fa4309f769a61105d493c419fbb88e9cd6a1afb43a78be0589d02428aa210d8d2d8f282b8d61c8dd5c1a5d55f00050880b8c0db86123c6cb", 0x41, 0x100}, {&(0x7f0000000540)="c7e296c9e036bb629d19541fa375a4bcb9f2bf71efd0d6e7bf4fd6278b536557388603593137d6c4b563ccdcbc1fba92e72594440a22d83a4a9b1995de1c9f6ae3bd0f815ec7705f910d7267c0a4351dc86cbcfa0e06e38eba57a8fd694adaec3332bbf7e1614b0a99354e1769ddb3613010519c22cbf7b790ac864edbde815e088b45cb2746e648ad55f10db2d0460688fcc4fa470ea6c8c9c70bdf03288211eac22f9314", 0xa5, 0x4}, {&(0x7f0000000600)="17f9e13182ef89d1cfe24a20a389c847267ee00b5c5921d4ecb9a61ab60efee13af660fe37c9fb7a3a859cbe03be3108debd344fb332e2156a7f4be00eefd2d995ddbb40a932256a260626989380defd014d03a7def7e33342254dac9ae89c532c2a3dce3874cccebcd3925ce35ad03ca29dab3abccf168aae37609ab5e5dbf750f9e416b106033b76774fb738cc04bb87537b57551662728d5a6e1eceeb50494d8b5456faea261e460158d5f341e0bf31941816cf5a0031946d302dec3aef12a6d4ccc4324d52b6e43c1a41", 0xcc, 0x1}, {&(0x7f0000000700)="ff1c090653615c444e8514d9b3ea2f2cc458413c98ff48e68ae4c13cf1085a000dabf1b886bed63ea7245eb4fb66612d9b14045a01ce5b67715a012bc6e77c47c86e40d52efe1e3ee55637f6dec612a86836d40dadd0640ed91b872c6fdabd1d2cb9425f0df8489939939fd81512c2535dc842cc99d9db442aa5ff9c0ebd6ffec0356c", 0x83, 0x1}, {&(0x7f00000007c0)="45b35886e9c3f58241889075a0e96f2291edd1bcf62581d72fdd72dfc2a72521fc5588ca3e744cea700a8f48b3c130bfde90fd05de27743edd93650453d36a158dbc040b105f07640e788638589d68e3851bb39020301c3890b307550264f6ee47618335d550d1098fccf0026b54ef7dc3617a650b2b044a36a784eeba01cfa52be55ae2ebf66a25b14d1175", 0x8c, 0x140000000000}], 0x804000, &(0x7f0000000a80)={[{@jqfmt_vfsold='jqfmt=vfsold'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@balloc_border='block-allocator=border'}, {@conv='conv'}, {@grpjquota='grpjquota'}, {@commit={'commit', 0x3d, 0x1}}, {@replayonly='replayonly'}, {@replayonly='replayonly'}, {@errors_ro_remount='errors=ro-remount'}], [{@uid_gt={'uid>', r7}}, {@obj_role={'obj_role', 0x3d, 'vcan0\x00'}}, {@euid_eq={'euid', 0x3d, r10}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@subj_role={'subj_role', 0x3d, '-wlan1'}}]}) r11 = dup(r5) ioctl$FIONREAD(r11, 0x541b, &(0x7f00000024c0)) bind$can_j1939(r11, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0x1}, 0x18) 03:35:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001014100025bd7000fcdbdf2508004c000000000008004c00000000000800001300000008004a000100000008004c0000000000080003000100000064ee4f00050000000800030010000000686b1a839b4ecc46cfc3af000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000830}, 0x8004000) 03:35:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x402, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000080)=[{0x1, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0xf0, 0x4}, 0x0, 0x2}, {0x1, 0x3, {0x1, 0xff, 0x3}, {0x2, 0x0, 0x1}, 0xfe, 0xfd}], 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[]}}, 0x4000111) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 462.597137][T18098] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 462.597137][T18098] 03:35:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xc) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:57 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1100, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x2, 0xff}, 0x2}, 0x18) close(r0) 03:35:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) mq_timedreceive(r7, &(0x7f0000000e80)=""/4096, 0x1000, 0xfffffffffffffffb, &(0x7f0000000100)={0x0, 0x1c9c380}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000200)={0x9, 0x0, [], {0x0, @reserved}}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYPTR, @ANYRES16, @ANYBLOB="0d2f4fec2d5436ba6c176c1aa9ac529d7bc16d683aedca3f83e55262780c18385bd0473d42a03e64fb5b0bfa11ee2d2d1ab7dfc733fdaf59cb5ca40bb09bc942825527f0aefd2ebb5a049d97ee4cc2dd2b81bdb3dbeee3e1b9e3573b83b1db37484cd4eb6004c28a9ce85266af50a00d2800aba962724fd8dfa901fe741bef3f47a4d16fa11dcd24d8bef4c981d78a8a9099cf9b0bf6c8693491008c86c36969a255f1faef10cb4ba86e58"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x41) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) 03:35:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) close(r0) 03:35:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[]}}, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r7, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) 03:35:57 executing program 5: futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000780)=[{&(0x7f0000000000)=0x1, 0x1}, {&(0x7f0000000040)=0x2, 0x1}, {&(0x7f0000000080)=0x2}, {&(0x7f00000000c0), 0x1}, {&(0x7f0000000100), 0x2}, {&(0x7f0000000140)}, {&(0x7f0000000180)=0x1, 0x2}, {&(0x7f0000000200)=0x2, 0x1}, {&(0x7f0000000240), 0x1}, {&(0x7f0000000280)=0x1, 0x1}, {&(0x7f00000002c0)}, {&(0x7f0000000340)=0x2, 0x2}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=0x1}, {&(0x7f0000000400)=0x1, 0x1}, {&(0x7f0000000440)}, {&(0x7f0000000480)}, {&(0x7f00000004c0), 0x1}, {&(0x7f0000000500)=0x2}, {&(0x7f0000000540)=0x1, 0x2}, {&(0x7f0000000580), 0x1}, {&(0x7f00000005c0)=0x2, 0x2}, {&(0x7f0000000600)=0x1, 0x2}, {&(0x7f0000000640)=0x2, 0x2}, {&(0x7f0000000680)=0x2, 0x2}, {&(0x7f00000006c0), 0x1}, {&(0x7f0000000700), 0x1}, {&(0x7f0000000740)=0x1, 0x2}], 0xd, 0x1c, &(0x7f0000000940)={0x0, 0x1c9c380}, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x0, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}}}, 0x24}}, 0x0) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r6, 0x0, {}, 0x1}, 0x18) close(r0) 03:35:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8000000) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x65ecb489, 0x7, 0xff, 0x1, 0x5, 0x81}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="000300000027000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r4 = socket(0x3a, 0x6, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:35:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:58 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0x2}, 0x3f) close(r0) 03:35:58 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x6}], 0x1000, 0x0, &(0x7f0000002500)="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"}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0x1, {}, 0x2}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) ioctl$FIONREAD(r11, 0x541b, &(0x7f00000024c0)) fsetxattr$trusted_overlay_opaque(r11, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 03:35:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="7bca0000ab8084aede4ccc553c7cd68246831f73d7746151991a"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) 03:35:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) setsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000000340)="683d62668091edcf93a9e06adfc03ba2a291742ae16863394a5f4b6a68b0fea9b51efe0f70ac728393473c09ccd2a235f9b2233b07dddb88a522a0649a6e0cb85bff37e5fa", 0x45) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000002740)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="6f6da823590bd02845e2f4b598caee748887ef1db1113483c3af5c0e41cfe56355dd1c540c69f086532ee60e176def9d7ad1f83818998de86a51b60b3de94dbf563f446c96df342c02678d3376fcd758074661b461e97be264c35d8e704d813d3e9a6a4591ec32520ce0652260cff0c3ef95d03c497d4b368af8b9cdb01ddcdf82cf4369dd0c91573ed1af7273ee5606b197431512a1a1863f70fabe3db4b9c61dd5164dc922f6b55198ee5934d5cb802d76b7b4aba0a9f8ba46c6a1f019c089fbe9b272a795546b17ba110648521411ba5818f690f328d8bc95", 0xda}, {&(0x7f0000000280)="153d55e566f90c0828274507d754b1713bec13086a075b7ee5219e607ba12543b80117491c61747393e3205eea9d57567ba7171691e852f894e4e379612a9079e310695f16855d6b0071454102dd66b3c574356c2629c21994712201ce9e7fa17f3af2dde3e600fa3756bf822cc28da82221e83212a23c511cc7703eb45efc602efb9bee0ba8393afdb936ddf112b4e6fd05fdd9bcd5070973ffc826f6c08a5cfadb5524e9e3845d", 0xa8}, {&(0x7f0000002900)="6d5fa3e18d2b8de53c8700654c69261e43bf629a0f11697a2b677c198bcf6dbe449284a35827e1db200cdc3bc1cf45a7cc4d78cf1182f96747c7fc0fe89e835e4f71c0623080f93119c4c8b68b7670275cd8f8fd371a71ec0e30744f72144ee2825533cc89e6fa8ac4a5f7c71cbc71c2e4b6d3cfe037fa6e427925e265c1acd35742c2347cab940a085aff07eeb3fc3a3982159c72f0a8d5c97fc198f79f86f0be013c849e1c684ec6581ae38a48bab88b9a01e6ec10f88c5ff8455e29e3dfc64d4683bfecc11f79b821d0f82cfd9155db36fbdcae623a375e3268a4166a9a8fd39a60c7092383", 0xe7}, {&(0x7f0000000180)="0c53336af6c64fa38323dd28594a6e817ce639ff5484cc615bdbf511e171fafa53f60d04d8f84c9856261d21fc1deaac2b2d236be1cadbebe42580f3964580962886d1f2d9", 0x45}], 0x4, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x7996278d6f82c796}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30, 0x8040}, {0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="5188316fd99f0245e8fc1703458d33d50e56093e70800d607c005c2ea6c31dcdaef9", 0x22}], 0x1, &(0x7f0000000500)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x20044010}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000580)="79d8f24034e46a3fa3eebd9686caea5788e8c24f1c0ea3511b006e55532f1308c54bad3e04d928d7d54c85ece9cb0965ace42340a278ca55d09d5024c0e718e7088a70742e843cfe5f412dfb28c1b916a30c200a170f784ba04413233d2d2e902b06bf6e7dc3e4dad7b80399a83b945abbb3c37f", 0x74}, {&(0x7f0000000600)="1af801ce8204b72a75e31cfc21948ca657323e76390d1e1c3373aa2e57f0b11404ecc31df6c7bc45b30cf1d4dde4ce53089282587b69c655dbbc3e8fc4935707f3f6d73edc4b935be127bc494849bcccd47a576ad2e09b610a4e0f426efaeacc9c0df39c0301c27a0fea3c116e5ba55b7e54074c8a006bd1555ed1df20d8216c97621e2851d81056560ff718850c492f5cc6fae4b1e4898100f7d72863009615ea38d407815e3d5660c8b0459b481945bdc308", 0xb3}, {&(0x7f00000006c0)="a2a12857a7ce0371d06269fefc0accaa9125a04ba76ee7e59a40e612416035db94b6f81e02f8b3ed5467a2c00b15843eebf536c238172865161666ff9d7e4ca552c9a181d4db89ed3f5cdb7a5da8c29be5bf3276240189d7dd833e62b3b95a1c059e1685dca95b1adaead03b1205c37f90dd08f59324e679c1aa41017d19f82cc30468f819440747da95a3ab15a636a4c311c35c3824c9c3e7dbd35452b233ee2c0455db7ab3564d21b5186dd07e88f4ddb84cb67a3d66d9dbb4a887f2181cf69707fba612c2e26035", 0xc9}, {&(0x7f00000007c0)="c5c7daa6de6ed80730528241cd1247fc8394b3a347384a7961804af4e5e831a1aff7fbb52a16b5d5052e31a17116224ab4d564af0400732e76a951e6b405d3dee68c60e34f93b4c3e4fa4c17e151a57243f9e060315b75eb823ae805be67d484fc2adace3d0830d111422d9757930a907ea29b4e28437e1f85873337086832666df2d17cb95b8fec2e12df6215163227ff4a928da44a6b179964a402a13353dbb3d87a4135eca6a0f650d7e057d94a11680d2e8538a78115169e3bf6f20c4a8515a057255b532f6eb887c2cb2bb46c5baeaf4e71381dcc771fb7e7697701d4d522d4b7ea18a2e872", 0xe8}, {&(0x7f00000008c0)="e2f479e757e30a8ca610112cf7e4d22e18eedfa06ba4e9dfd93c4b14ed7af0a6b0b43dcfc5404031a0fbb92b1696f4e5d949c0081e3a5fe047fe295f07c2aac906c1ba63890c81d8", 0x48}, {&(0x7f0000000940)="65c51873281b6d0d2416e6b7d7272a14eab03fe405f6423359da2b718dcbb4a5f286a304d26d8379b4c39a94d2f0b7886b6d0407", 0x34}, {&(0x7f0000000c00)="1be7c259cdb4417cca2dcf68ad0e644f3e0007f97443c4ad42cbdf98ff00d80bbc741ee2b236bb323e3672f4a399bbc82841b668599fb21ffd308cb7f0d0be", 0x3f}], 0x7, 0x0, 0x0, 0x90}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="e9b30ef82e0ba899a93d2c47f99a5626ec4b197b6f6ab92d3e04510c590be7046246aaeffcd5034941750128072ec904704a33316b93f179a98fc5ed", 0x3c}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="27c41b33b622cdc4b4f95da7891c841907c01bcb4cefc22fe11e859d16a3dda4442d318238814557e8e46b77e5f4", 0x2e}], 0x4, &(0x7f0000000b80)=[@iv={0x78, 0x117, 0x2, 0x5f, "b8cdb51c155ad16d4e0d4b5305d9bb18f7ebbbda2834089475b54f63eadf027e4d03d01595172e03ae6e2f26bafd7221453a33841b1fa205186c3a8dac23d82546a080cb7537584e3719280101cded4efc2c1a67bcdcc76363387b04140636"}], 0x78, 0x10}, {0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xd8, 0x117, 0x2, 0xc3, "71f60d12fcb4f44d6336b1b39794bae81d117e37351b22c830cf89f1372f895866af33c5dd7503fbeb65a3320b3e943a86c77c5acfb231963be371813a000eddeaba431334ed19d1f97803495c5fd3a6142665a44218beff8f6188e9af97399535428809c477b755bee67df1c85ea0fa796de0ca2c7a5e4784c2ffe673388c24d919c3c9f666deac48b7ac2bd08455a0a4b1fb59499c0475cddfb62d8decfa03e4afeb953520939fbc24d3e775efce7a072f1730f9912e8beed88b322218f99ae0fd69"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x34}], 0x138, 0x4004000}, {0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000e00)="fb08bbb13413af08aea05cefba3ed6cd011418b655b5d869c7521f5b07966efc0953a5a7322ebe5b5c63a7ce9708f5ba590686b26dcc115c3e29f5756a657bb708deee1989a570b0deabe8b6e6331180b42046e295d6f8e0102c25c8b01a9d8fb2", 0x61}, {&(0x7f0000000e80)="9fce3c759afe21596bc48f07d716b2bb8ffe7045b7269b175161e7b5d345c858d33cc9dfa1d18cb4ac76e3bb1de546e1894761c4dc6fa311980eb2f95dd4554add57c0cdaac862179a57161577e6fb53ffd3c13c18ac19e0cdd3cbcdd69cc2db315d1e326fe2a4f69855ed86db23142ce6b1b883831dbfb923e0b0afd85207f60c431e6624a8e266be650be81fc7fe74fab4eb02a91694014479f7420974a253d08950e6ac7f01dcd2fc83b273282f3bda652cfc7635a90207c78096e4b9", 0xbe}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)="7314ac9c68993d431b7d6555fb3215436c326a5b8170d7e22c2e6bdf607ac1ea09aa83df0f4e0699d81aac8a3d", 0x2d}, {&(0x7f0000001fc0)="73dd71ad036614b2874d5a1d5807", 0xe}, {&(0x7f0000002000)="86a62f0f107f8d9851371e0ae628ca530254bcde60c08bc6bcc793ad536fe50f60f7e06d0a11ac1458781d0d920afa730169592ffb459d83168d4cef1f9f2192cdac05305b0cf376e4f8cca5f50c1b7e5eb9375ddb7d703591a7a1a485fbed69e97753876dc2c3f9d31642ae21c4813a1b20d5b7fc56e8eb9b5d04199cadc259234286a63dd8b23c07a839b976c8e556cee9a8c001e2f546353033eafae1981b159656700ef6a658b743af2196125617b0bc0fe13464b54dca5fb0fc2e77c8f520ad9d3818ae9195a01dc36612c935ea94b2a4e04914e762019e61accbdef075bc", 0xe1}, {&(0x7f0000002100)="3e4391fb1b8453e0329cd8b2f91ca8675d417720b78a130129879c8d7b741e4e21d54fd439ca6ae2b1c309bb54c3932f71f7b3242df3ddd2cbc217ca9916c72c7440402e94b94ca5db08ea1df9bcbc3e4a75176c6b6d56cdc70b2c429e16da47bc22876d614b1a3aac2e9664785131158a8446c9195da620a132c2d75dd96675a8dfa0840e616d4dd1fa65f1d4590ef451d447b4e9173b8dc3e24a442395a3036bd26b2abc615c77968d3649a8ccb5343e6ae28bba1c10acb237e70af97501c0f5773091f8eadf72c8e090c17932f8d9d689", 0xd2}, {&(0x7f0000000a80)="7739bcb9da6edb0bfa1d5ef32d46ee6298030b79cd05315c698ae6a4f22fa5b0cc40c119fa939180a8f264120fcf3c619ede3505471ccae68746cbd9d8bbe4cc6971042a3782839240b4811ec9a89b720d4938aba3e40067c4b36273edcdd5c5ded2284ade361e", 0x67}], 0x9, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002340)="e70e2f4a34f5973803576c6f9a7319", 0xf}, {&(0x7f0000002380)="1295a0d8cb0a44e44d3119f5aa7612d57f09b44c19415b6eaad4c77fa422609b101c0ba8614195181d970137688d486c85c42c19b7c63534a55c4ca20fc1bcb70ac6e8b5c61906fee99f2c0725ce98be564cae7dc59e48095582b708517c16b82003f6adfc104132e0c68387c206b9cdb546c331d2dc3d66adc1399a8e656eb54a7938ccb9659c99835c90a9265b803b1489fbe0b21ab5dc18e24b67b1a0b93b262873e310c8bf572f374ee986b689fe50617a2868f3460756056c9488d9169d6331603cf8", 0xc5}, {&(0x7f0000002480)="3073277b8a0817804e323fa122e9e6d41672fb230a78b0739904ad05fccb1004826ef38845e4f27fc9cbd00cd17640551814d0eb2fbaedd784ec5764c7d57b955288f3ed544b643f770bb1493f294bbb0505bb2cf7d3fdaf62fa7ed29a3b16ab43e49e326255e56a5664df9ed7d338493c4b8bde09344f60361fdaf4462c0675", 0x80}, {&(0x7f0000002500)="9847eac9a6d40383a4f3118e1e6a540c83d4ecdac400", 0x16}, {&(0x7f0000002540)="c481c1cf76b7cdd242fdabac1c995527c3869587fcf9232aa764387ba5121f29a67abcdeebbc23a7e85f5fd4a71ed347c10b3ae34e6d73cc37e93dcb7f381f9fe41eec2007d444a8de472eef84cef428184f32a1e3e9545f9639ee71084ad67ce95e6b76994fef4c0650baa65edc645816cedd4afa98eb613744e2855c592d5d0016162dc3790aff", 0x88}, {&(0x7f0000002600)="b5a5f66e37eba1be40a9323a334a5ede85114973c371e386109279b2ae21340109a16b749d2fa0ae37791ff164f17e83e7c20a4c66cb5ef2f45777130565a276e2b0cabe31", 0x45}], 0x6, &(0x7f0000002700)=[@iv={0x20, 0x117, 0x2, 0x8, "c2705bac341b88be"}, @op={0x18}], 0x38, 0x20000080}], 0x7, 0x11) 03:35:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:35:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0x9}}}, &(0x7f00000000c0)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) fcntl$setlease(r3, 0x400, 0x1) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:35:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff, {0x0, 0xf0}}, 0x18) 03:35:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:35:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000000)=0x8, 0x4) 03:35:59 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x2010, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:35:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x1, 0xf5baa15d69d62f35, 0x4, 0x100000, 0x8, {}, {0x5, 0x0, 0x2, 0x4, 0x4, 0x4, "81d4e1cd"}, 0xbb, 0x2, @userptr=0x476, 0x3, 0x0, r0}) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000080)={0x81, 0x7ff, 0x1f}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={0x1d, r5, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', r9}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) 03:35:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000000)) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:36:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="8000807021030000000000000051ffde"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, r8, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x234, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x364}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1aa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb395}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x44054}, 0x20040800) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r10, 0xffffffffffffffff}, 0x18) 03:36:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670b, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {r3, r4+30000000}}, 0x0) tkill(r2, 0x20000000014) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 03:36:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x3f00, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x4000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x30) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000040)={0xfffffff, 0x0, 0x645, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9909d1, 0x80000000, [], @value64=0x7}}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) uselib(&(0x7f00000000c0)='./file0\x00') syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000001c0)={r6}) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000080)={r6}) 03:36:02 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x2bcfb21ca912d60, 0xfffffff8) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x707381, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x220100, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000140)={0xe7d, 0x7ff, 0x8001, 0x6, 0x40, "c85c712064506fb0719aed3d9abd56fadf8da6", 0x6, 0x1000}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x400600) close(r0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) bind$rose(r8, &(0x7f0000000280)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, @bcast}, 0x1c) getsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000180)=""/256, &(0x7f0000000040)=0x100) 03:36:03 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x4010, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x60) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x856) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r1, 0x0, {0x0, 0xff}, 0xfe}, 0x18) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x101140) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000040)="cb7772cfc6a028e2f2eef56d2dd70e72d622fc7e72ff24b4f7c46891eeac31afcdc2ae1fac47bba6a02611a134da68a4bd11ad9a36e2605c0708e6011fa5a6f9c9ec6d148404e63aa3879a63164cf19c8685a64946fbf09becb6990bcde9f921c54bd7907d0c81ec37b06d2847050c1b7d069de0470c8fb6d4ef275003fb2fce0cff66bc701bc2ca53719371162f8c26d6f1d87bfca3041f791d518997be15b705e20749b7f340a868b213fb8ab5", 0xae) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) accept4$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) close(r0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x6, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000002c0)={0x1f, 0x3, 0x1, 0xfff7, 0xd3, 0x0, &(0x7f00000001c0)="31753fea8c39b0ec5496b7014f2ea7f02781345a651f68f98858afeb0879e94b1ba0274cdaf2403fbcfccd9fc98d9fec2590e39305cf93fb68e0610b70d8398376175ebaf7c1155a41b510c6b2d1ab46877fbf5c4387b88b4cf3f976e20657adb50795ef323edfeb0282f55f481c45d9019e1a688c8e93635d6c5edfa7a715f9ca369ecd574d86c60a0f02f85efe3d1e8d97a845025b41afaf012dd28e077d74048f1a6ed458964a008f73b42718adbf5177f1f6cc04ba3c36784824ac361ab660cc08e6b590f1397314b0e154452737a8d6c6"}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:36:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) r4 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000640)={&(0x7f0000000200), 0xc, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x2}}, 0x1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd8f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000e40)={0x1d, r7, 0x2}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x20, 0x3f}, 'port0\x00', 0x20, 0xb1028, 0x2, 0x2, 0xfffffff7, 0x1cc, 0x400, 0x0, 0x1, 0x8}) bind$can_j1939(r8, &(0x7f0000000e40)={0x1d, r10, 0xffffffffffffffff}, 0x18) 03:36:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80400, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3435f980647c87a4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000000001000000000000000000000a00000a0600124000000000100005800a000100512e3933310000000800084000000003080007408000000108000340000000020c000f80080003400000bbc63400fe80000000000000000000000000003d08000200ac14141114000400fe8000000000000000000000000000aa"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x824) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x7ff, 0xc, 0x4, 0x1800, 0x7, {0x0, 0x7530}, {0x0, 0x1, 0x9, 0xa3, 0xff, 0x8, "8153f255"}, 0x3, 0x4, @fd, 0x6, 0x0, 0xffffffffffffffff}) write$FUSE_GETXATTR(r3, &(0x7f0000000140)={0x18, 0xfffffffffffffff5, 0x8, {0x7ff}}, 0x18) r4 = socket(0x11, 0x800000003, 0x0) fstatfs(r4, &(0x7f0000000380)=""/224) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', r5}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) close(r0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000200), &(0x7f0000000480)=0x4) 03:36:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280001001e00010000f9ff00000000000700000030aac541ad4cf407d8", @ANYRES32, @ANYBLOB="0000d8133050c552b006000000000000"], 0x28}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 03:36:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8814}, 0x20000044) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) dup(0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x3c1c, &(0x7f0000000140)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x4) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x5, 0x4fac, 0xfffffffc}}, 0x30) 03:36:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) read$dsp(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r0) 03:36:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x80000001, 0x4080) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:36:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000000)={0x240, @time={0x2, 0xfffff800}, 0x5, {0x3, 0x40}, 0x30, 0x0, 0x4}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000001280)=ANY=[@ANYRESHEX=r7], @ANYBLOB="02c7e9eaa410ae85b9f2fa8e16862685eb00c2a87624bec50fae25bee52260e0e246a7d28db172e15cf0b38ede290a9121649fb476aead61294e35fa00d96d7a59f253b80efcd506d040f32693551fee96bfb09f624ece25882f8d4f43b3ad6b05f05af77a594e268a0a72f1d98aeabc9c3ca37583dc77f170067b3485f05db18236d5f3"], @ANYRES16=r3, @ANYPTR, @ANYBLOB="b7bd3c735c24d608b0cedcd871", @ANYBLOB="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", @ANYRESOCT=r4], @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x3}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) ioctl$BLKREPORTZONE(r9, 0xc0101282, &(0x7f0000000180)={0x200, 0x1, 0x0, [{0x8001, 0x2bfa, 0x3, 0x3, 0x3f, 0x20, 0x2}]}) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x332, 0x0) 03:36:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x0, 0x1}}}, 0x24}}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}, 0x40010140) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r5, 0xfffffffffffffffe, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) close(r0) 03:36:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x401, 0x14900) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000080)) 03:36:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x4110, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000d64cd2789e77280200000000010097d9d48e0046000007000000", @ANYRES16, @ANYRESOCT=0x0], 0x3}}, 0x4004040) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 03:36:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) getsockname$llc(r5, &(0x7f0000000080), 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) bind$l2tp6(r9, &(0x7f0000000040)={0xa, 0x0, 0x6, @mcast1, 0x0, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r10, 0xffffffffffffffff}, 0x18) 03:36:04 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x40000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xa10000, 0x7ff, 0x0, r3, 0x0, &(0x7f0000000040)={0x9e0001, 0xe4ac, [], @string=&(0x7f0000000000)=0x2}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r4, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x3, 0xc, 0x5, 0x5}, &(0x7f0000000180)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x1}}, 0x10) close(r0) 03:36:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) ioctl$VT_WAITACTIVE(r8, 0x5607) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r10, 0xffffffffffffffff}, 0x18) 03:36:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}}, 0x24}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0xffffffffffffffff, {0x1}, 0xfe}, 0x18) 03:36:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="288700df1d001a0000f97f00006cd098b0637aade7070000e5d968fa81ebfc190c2eaa1102a29bf0247da492b8e1fcb3490add6fea2aa9de3af2a6d408fd7759a561e5d20ba3fa8ecf7db38b85fdf2f3adafedc1c069f13590a9b0f597f665a4c0e8ae2a3a4534a3726ef636efa1b7e10493b8bf8db2b3df0c096db14c0f74d71b5aa278045535b4a9c6e76a51720f109a6604c541edf55ef86a726ae9c32383274ac08385ca7b87259d4e25a73614cc0f63bf01d3bc22a9d4e308e1adf2b38fb7e9001b717730959c2477c92eece00665fbff63e0fd45070d4b589eb9650be78db4634cc2e94f4faab28c246606378cd5c0ec57a227f619c8e9", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x140c, 0x300, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010800}, 0x0) 03:36:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x300) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r7, 0xffffffffffffffff}, 0x18) 03:36:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="006b1034eca6d3e28a91ddb0cb69af8a5d0a91fe80e42af58f68178908406e743b7f8e5d43c9dde1e2669d4253284e35aad1d499474ada0e9b18ee6c1e826404bb7d21b132c8099a4e6757864cef29d58e"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:05 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', r8}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) 03:36:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x3}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) getsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74) 03:36:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "e5ed011e69de41ee0627"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bd3a8594a33610666de932cc58"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 03:36:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$TIOCSIG(r4, 0x40045436, 0x1) bind$nfc_llcp(r4, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x7, 0x81, 0x2, "581d185a3c97b04e6b444850ab18d1b2c512a1a7db9f1ca9fc2be6ac8387851340a053352b18d6a035753e8d07f309099c2b8f8cad3af4f6bac96c5d73aa6d", 0x8}, 0x60) 03:36:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) accept4$alg(r8, 0x0, 0x0, 0x800) 03:36:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32=0x0, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x3}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x34f) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) prctl$PR_SVE_GET_VL(0x33, 0x10ac6) 03:36:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'hsr0\x00', {0x2, 0x4e24, @broadcast}}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() tkill(r3, 0x33) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = syz_open_procfs(r3, &(0x7f0000000000)='fd/4\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffe070000c01dc50be2fb63b9edf26b55b5c75200ff6295e8365392b516fccf58d789a1bd689866f26a55ca3adc985576ef33e68c1edb864007490d5b0f9d508d260541525c0d5080b0f4a5d7d50238121bf1895bf598a5585557a191f5af00"/113], 0x28}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000013c0)={0x7, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x3a}, 0x1000}}, {{0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0x30}, 0x8}}}, 0x108) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x1, 0x6, 0xb002a84dc4c3ea2e, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) read$midi(r6, &(0x7f0000000880)=""/221, 0xdd) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="e15cb60eee055828c86df8876379abb91516ef59134c1a140c1311efa2cf2f574f82668d763f1d338dc498", 0x2b}, {&(0x7f0000000840)="e4af8627c9c42cc1246af60e497076630455542f2fdba612f57eb4f760cc8aeceb2d", 0x22}, {&(0x7f0000000180)="f797f59ec5ae0a554bce9bbf654ed7dbeb9bc10c0b64f5b7f2c634b78cdf0382e3158ea93b00842bdf9cca7efac3125541d5073d2269ad8baa4da27b6590a9f5471159c1fd13986c3c18ffb83e296680b8defe5e3d8e85a79af43dccafbaac44a841d989ae31810cb4a293a4f9d2a10c366fbbfa6f954686ddde0b74427b46b5", 0x80}, {&(0x7f0000000300)="1bfbbac57990fdb8c1e392360fb50ec6542bcd7b96cf299e27c03bddba0f1f256945d8b07b72d3e03bbf81529d277a08374f268483120437458ee64f937dcb65ae097320150c4c99a31c761fee19b8a63df2b6b3778755c02780392aa3f33bf2ef518faec739c62c2206e241c8a6b6061411d262e9776dabeae563c0a2", 0x7d}, {&(0x7f0000000380)="438562ea87f83362b03a3823c40ab2eb528dbeb6fc6ef27415c356ed33d24d2514c7f051f760f67cc0136ab20afb4e142089aa07596e702152c2cf462023ac6827c27b4b7eaf7fe2f7ac29bc7d8b41654a8cece2bcda97067fffadea378eb9cf5bf64f01fdd247b46b2e19ffcea5301e01390c7ad6607a1120229f5bfe8e7164824f3a119234494549a4202f4efc13e1a9689e95be968739b7676e76ef3c9fc52c716f389d17df077b34e178ce70df2438dd0241837b270ceddd4015fd240d9ba973", 0xc2}, {&(0x7f0000000480)="acf406ea02d58234a38d1ddefb72577b1b3dc9ea34269bde83d54db42839443890314ce8808bac6d879c7b3fbe81beab5bc7f1dcb59b96660463000962aef6648087bcd6cc4219cf903745eb0cf35a72ea71df1bc650287dd756ccff5ea1cfa59f3e21cc6445bc7aaa126a59a18b88a9fb83da2b463a337736bc727f1698f377cfd17477a6f2fe21c636a2e7dcbadb18099c6b10ed66a9b31581e02af896412e8b75576bcdd688d5d24fc5dbc0ec07f3c307", 0xb2}, {&(0x7f0000000540)="329ce2e433d95a01be375a732af90ce435f49cd396ae86ecfdc5bcdfd7c4abd94e15765f55d5dfbd000bd2d6964077e0ceef2fcd3afe03bbf616d29255abb636e026200f4a69d36a5f0ef5", 0x4b}, {&(0x7f00000005c0)="06c07f4d4b6de0070b3eb9a65491b8694865488aa9cd20a91899c0ebe878d4fead7c6b3650ed49297982a3d013612e580c235e46bb8cad06c0186ffd307e3c02b05e0839bde10c9a502fe7320968b7cd4bbc1bd6969bf6e64e5e2c0967be8415fb92e53f42367e94bfb6121857fa5f65a2068fe8b0b69d01bce95053c27027a5e00d8803d92d3dd0835178816ae57abb5ada6794300f897a2849c741d34b6c4ca548112bb46500d46de9ae93b020ff8b1bc1bb0a5b23f8648ccc12e468e93fc712abfd3d9731f85462040818", 0xcc}, {&(0x7f00000006c0)="7dbbdb2b5617483cbe7101387c753cc2ce70d596cca1b8c59f61cba0bde66adc163f25cb067ee89d96f452bcf4e91a47c0dad035afcb502e4ba3e0e5356f703830efa51b7ddcbdd1635745504cda9dd7010e68959786bdaeca11b72f7f826fb18b661cf35b72f0b2769be9bb41e8f369aa8ced9b2cb69bb1e5e4c259f279588b29e0f173055eca7cb50e6fa69adefd6fa1d0203f", 0x94}], 0x9, &(0x7f0000001180)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xb8, 0x117, 0x2, 0xa4, "886e4a222dc4c2178333bcf8fb4aa9884648e62eb2fc704c31ddc03ea7fcae8961045b7ca4ee073d2e46333247dd01f2a251889cf43725685575861ba4392c452a8813f6718f020b3200330eb95433ee42ccf0617e36b46d8e52051854bcdfebc46b0e4dde757354a3776afbf880e8783e0b23adda4d1d4eeb239a2bdd508511a7d2bcd77f49e12398ef98f80dce485bc247e316aea0d8cdae7857e059afb7f019880b0d"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x2b}, @op={0x18}, @op={0x18}, @iv={0x68, 0x117, 0x2, 0x4f, "540b0d2cb26282db5c7e0cf6dc928e8712c3015518af296c350b2228adeeb53191008dd33d9f1fe06c14bc3b0104845043d14f19882491ea603ebf733ed288f4c815fb2b9667b80719abe91c99ced2"}, @assoc={0x18, 0x117, 0x4, 0x80000100}, @op={0x18}, @iv={0x68, 0x117, 0x2, 0x54, "fdb660c80fabd7e1536c44746e881d53f2f62f3bd87bea8c126263b562cf13d87e761a645145b9c0ed0ea3728ad31c4ea4d3b2250cf8b05a261af935b3c5819f8c41d6482d4066bc54383c88bf6e20003af14b5d"}], 0x230, 0x40}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a80)="4a2fec526e4a3b566b162d0791a4799650b7a2b12427c9e27c6365633499e68b420a5ca6c8136d626db19cf15e4d1bce0233afe2f706d9468cbdef48e7dd099f2009c4d1313a446ac5c299f7b72c33084a05498c538d8d557abe093d162420407bb1018d30dc5a88d0804aee81d357712920c4bb7bf45a28d0a96c322eef4f", 0x7f}, {&(0x7f0000000b00)="0bc544e308ed86e9a81bfd7af0151cdf0d6a4da765357940bf51b9143706de1a7c44a12acd4514f098039875219db032a7cb64e08a9d212f0dd2840a52dd11cb6e6482dce771a1b10214816d4107702b093a0337b44f22b43006146c03d669132d4cc9e6ed1db4434fb55b900e4df2ebaf8cf13065895a4bb1801fa54847bdf7ca49b45ceab18fd09995", 0x8a}, {&(0x7f0000000100)="847cba7b1e2f2f88e35219a08e0ced211d8558", 0x13}, {&(0x7f0000000bc0)="575911bf7e5508b4bc35dac36773b11b4e2f119b9af6c77971438d5d043fe1e22a14929bbfac3114d73e88d5d576522337539926a4ad5d62c679117dbe59ed03bd8885d5623748493ad2fb8d98ffecb0cb0837d85691f1c13eaad6ba0a435dab14ed67f618052e7a1205fdd81457b93d9bc4629d3ddac1a408885d2dafdf37f299097d7421da2996ce39d1be2f8de89df17fd85240a2fb8573d29fa9a70e3a59ebf24e9f7747bdfbf13f5dff39785d1ab36de7fe75eea23462da55c4ac2c0ebe537b869f3b3d5598fecd4195dc52ffd4beae0318dfdab66d62a9b9370f857d5f60d312277a4454b6095ba1c56e040b466abcb3c03ba87ae8", 0xf8}, {&(0x7f0000000cc0)="f205d8ce10255fc4bbcd042ca06f50d780556bcd4f6e72be62053715f5c25fa7659683c155ef00541d944b51ed946a79402386ded3996f3ca2e9520016e65788b7c227e59d5f8ebfaf53ac3e01dc5ccac9206f7e14cda005e93bc56ce12fc61505e93fc8ff1d2d76e97548ef3fdd0cac0a69ed3b63855b7925e660ed0b84b226069ce589f48205", 0x87}], 0x5, 0x0, 0x0, 0x4000001}, {0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000e00)="ee833c7e5ff14eb60eb583c0bdbdc5f77950599c2f23cedde5fbc06d638a2eb413c2f70baa76ad4a287be70bfebc4122a1f3d1a790eb1c2577f735d21679b62389f4c75f8df669cf04ab5c1121f42aa203c3f3b1e2722b8eff59ecdedae95de9fef441344cc95f08e76c6c34d386e72edb5e64c3502ae8294ff0b3fc3fdc06c5", 0x80}, {&(0x7f0000000e80)="ecd4189aa445baebada135b43d8b2601b1ba93a603105293142375f2bb785ba0ce146af636dc28710b6c3b3bbe4bfe0c3c7e2d3c2a6bd34333e057152543e1d950e2b92b23f9e222bff267d66ede60843e4379281709897c799b5b162e2fc910e03cc261836a6ab1494bcf657817f639d11875c44a0d87fb", 0x78}, {&(0x7f0000000f00)="c1471b2c2ed2939858", 0x9}, {&(0x7f0000000f40)="91bc643ff04d05c4e673c7a82c20b19b4e83ac6e89cd2f52a6eb8ef16278b39f0504cb0f9e1c1c0adbfd3a2589b248008f3fc43c5805853e31ac6835f3a482a4a614090913c0a1fd16a18823c4a2a1c2dbe9fabfe6a97b560496ac68e6fd2ea901fa1834d550379d6c89f248ba9f66e7a6e591ed3a5516dad35265848cc37e139de00bfe30814b15beb5416c1667e5", 0x8f}], 0x4, &(0x7f0000001040)=[@assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x683}], 0x48, 0x80c1}], 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8080, 0x0) 03:36:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x4e21, @loopback}}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:36:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xff00, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x21, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f0000000040)=0x10040) bind$bt_rfcomm(r8, &(0x7f0000000000)={0x1f, @none, 0x9}, 0xa) 03:36:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff, {0x1}}, 0x18) 03:36:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$NBD_CLEAR_QUE(r3, 0xab05) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r5, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) getsockopt$ax25_int(r10, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x400102, 0x0) 03:36:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x600) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000340)={0x7fffffff, 0xfffffffc}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000002c0)=0x6e, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x4e20, @local}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r7, 0xffffffffffffffff, {0x0, 0xf0, 0x4}}, 0xfffffe02) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000200)={r10, @in={{0x2, 0x4e23, @loopback}}, 0x8, 0x1}, &(0x7f0000000180)=0x90) 03:36:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8, 0xb, 0xe0}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty=0xe0000000}]}, 0x34}}, 0x0) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_AF={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x3c}}, 0x20000000) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 472.921104][T18428] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 472.975434][T18428] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 03:36:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000000)=0x3, 0x2) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r8) close(r8) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0xffffffa4) 03:36:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff0000000000070000002f57eb75ed2ae91728b6d4e6519627704b5221599b194f5c310e5bfb26e402b07f239da8b2df0c168c3c6e8f9be022474cfda482278a008673b6404a13daedc6b5ccb41e386c0c657fec75ff9dcb09092239d23509b4c1d9cad2994e397fc3dd59ae2706f2ac14480bcc48341320f40435c924d058956b", @ANYRES32, @ANYBLOB="002a13153c92fe820080000a00f9fffeffffffffff6295", @ANYRESHEX=r0], 0x4}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0xf39a, 0x4421, 0xfff, 0xffffff0e}, 0x10) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000040)={0x7, 0x9, 0xfffffff7, 0x4, 0xfffffff8}) 03:36:07 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xff03, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000000)) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', r7}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r8, 0x2}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000e40)={0x1d, r11, 0xffffffffffffffff}, 0x18) 03:36:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xfffffffffffffffe, 0x6}, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="da7c7fbdcdc3cbe12834774228752d58010080000a00f9fffe7f1865afaae0136aea07152cef4d1dffffffffff6295"], 0x3}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xa00) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES32], 0x4}}, 0x4008000) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(0xffffffffffffffff) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000052002007415a0029bd7000fedbdf251c08", @ANYRES32=0x0, @ANYBLOB="0000fefcd9d1721d731bd722600000d27d2e4495c5528165085cbf6f9f677eeff62f184f541cc195997846ba93b70c446d95982a8750b542711d93984ef5c922cc71d5fc8128933a5d31f9f512a0842caa3f6f6e38bee39aac8bcc687e9c8501753b9784c244f61d9e005b7f53f7bd4547e5be952818d1bb17dec1f01f0ecc1bc0b37c8004babc5206f3db0ec18646440e24a3cee4095afd69b7139f611ab40dc871"], 0x1c}, 0x1, 0x0, 0x0, 0xc009}, 0x40) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r7, 0x2}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) 03:36:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x3, 0x80000001) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000040)={r5}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={r5, 0x48, "6238a4d125020b4c2071021395fc80fa86a22aa6f199806f60d46040a45267df0a1ecf476c2175036030ee7843bca292cdf11b81c80d8f1fb84529b7afb1dfa9745f13d09bbae82e"}, &(0x7f0000000100)=0x50) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x7d, &(0x7f0000000040)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={r6, 0x4, 0xc57, 0x7, 0xfc00, 0x7fff, 0x4, 0x0, {r9, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0xa79, 0x0, 0x2d21, 0x7fff}}, &(0x7f0000000180)=0xb0) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2c2400, 0x0) ioctl$KDGETMODE(r10, 0x4b3b, &(0x7f0000000040)) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff, {0x1, 0x0, 0x4}}, 0x18) 03:36:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400803, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000000c0)) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x60000) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 03:36:08 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x22080, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5, 0x2, {0x2, 0xff}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x70000015}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000e40)={0x1d, r10, 0xffffffffffffffff}, 0x18) 03:36:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00150000f9630000000000db3507000000001ad97957651618e03cf1640956f44b9f862863d815fc203ad4d51006ecb26e2ed230412e9305e3659a28eea907ec50f52270b8c35b188c0ef9ee481500", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x1) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:09 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:36:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xc00) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:09 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0) 03:36:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0xd000, 0x2000}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) 03:36:09 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000001c0)={r5}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000001c0)={r5, &(0x7f0000000100)=""/183}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x1, 0x4, 0x7f, 0xd2e, 0xe, "a24ccd23d58dafbf54ad70e77bbcf60a229d00"}) close(r0) 03:36:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000e40)={0x1d, r4, 0x2}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000e40)={0x1d, r7, 0xffffffffffffffff}, 0x18) 03:36:09 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='user\x00', &(0x7f0000000180)=@secondary='builtin_and_secondary_trusted\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) open_by_handle_at(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="9c00000000c00f008bd7de420e3ec6af2fb837d08034e848a371f92f22046afb6b08ce59c034bad574cafb7aaffadc3978b9fad45d9ade9286f19b20e71dba977506f2198120d32625099ffcd962ff675d4f764e4c1efb4a3958d68fce3503a6653d0cac5ff3dc2ef7a9c6260bb224a9700b129941575a7c4818141b0192b48fa67d5342475ae5369de094da7bc70c960c82cd298ba9784885fd9f84a94811f9c32f0700000089618d744712d861d358bd4c5d2be995d532b1acc1b03fabf167fb6ab9c1534ff483e0830a2b60aed3f4515592cddd6c8c1173b3e62e607cb232dab25fd6ad2534dc10149a8f56180c74eba3eddde348a8aec830795cde9f791414b1ea720aab1a58daefcc7f8ea6"], 0x6180) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000100)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r8, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:09 executing program 4: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x2000000c}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x44000}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000004c0)="8f07709996cbf80e5e88aa31cf9719728fe5332f47ca662c85685864b9476c884beed4c79ff74b47b9223cc39d26ac00171383790108f402fd91bb60260bd5b680eb40c10b6055f31a4d88f47f817d0c59f4ea31ccf114b1a9c98748378fa345a481cae9230bb707bfe202b16e092fcc63be9a0a35c319d1fc5c0ec791b994432d1c", 0x82}, {&(0x7f0000001580)="4482fd863a80be2dc974c8ce15242062d6d6c74d7210fe6a512a605cd900563141182a853f57cea80014bd98bd5433d540d997cba586f57295674bede6d9d65fa842d809df0d52f68bd938b7b11117c2a22bbd882649c80b1ebc0831e4cb2671e8bd2661c55e6bcc93ff4d0a459065a7d2ada2c4c79c29d3c6e19536d461eb1b1c8baa2c708e159aba2f086833c3a457a6781e29d7baa9541f7fb82d884da0c87b66123850835b5a5ca958bc9bd0dfbfea81763c068ffd29f2", 0xb9}, {&(0x7f0000001640)="492985887ae18e68b5a55c71a9511b817824b3dae574645e1b79db40b1bb37a3ff03f82d59bac54e869f895d2fd92625c104b55ba3cd5cd42c64fb4d437dc8ca1a2199da8727b3a956e679f52f56dbeac362d78f6d833d25fa35c1e8400e", 0x5e}, {&(0x7f00000016c0)="7092f52985ea07bf2af866f64ac303118035b4781f842c1100b3a31846d7c5246d44f00800dadf3fe958916e3bd97702817830ed7370376420d3a9affe140981615870e3be36c7c87a497742017fbfd2172b08e4291a5e2e0706afb32c1226e952014d871d148955aec86660a35d1ba2dd7989cc4d49870eece033403ee4b5112d805e11c3c4d26ef3488d4b2b20f81de31c723a8b62af69b57e", 0x9a}, {&(0x7f0000000240)="431cc1386e1e952eb2934ed097ee66eac96924b3c1122907", 0x18}, {&(0x7f00000002c0)="a81dadeec5b850fd14c60920725210fb6556", 0x12}, {&(0x7f0000001780)="23159bd719e313cf61bb30751b969df524b8cba9bb0c32a47cb3cd4134f8e5687410df8b7f4f08bdc2cc161c8645b4cd69cff506fbef69cfa2a73d6897dad4d433abc626e1f8ce50e48ca92367fe1ff879eef8fa1d0b6692bfe16c8c0fa6db498ea7c6dec7275150e8c2e3989c365102d8aa71069ef577bbef7ba9c4bbadc6d6952eb0bc55016c4f6fbb0ca94d6da6aced8bb02701233d3b5afd3b8d65c9d8fa69c3f0b2da9cb09e76d4841cab8f006d03ea718974aa4d6c58acc7408ceefba2932831bf66889a0a1d", 0xc9}, {&(0x7f0000001880)="7fce378ec5358e20f8ca1885100a19f578bc9ac33a5797f550d806b2cd88c477b48a92e58ac5fa63ad632868bb01da48bfa4783b7f8b0210af6f7b028654d34a6b51ac907c658199b82cd36482909d0fc2a9ff9d3f0e1a27ab80bc658878d8f7e960a1699950cdd6a8461ffbf043ac07b883c472c263d01bcdcaf0eabb3162f5f56d0e33eed98b4fb4cad9bcffff51c182d0085c7c3742069c53a7217a41ab29d676705d8e9e4d5a7a2060c75e63469369f01ec35ebe008eef2df454e98d5a1e58cbbeb39bc3152c65b56506", 0xcc}], 0x8, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x80, 0x8010}, 0x40001) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r7) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x300000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1}, {&(0x7f0000000440)={0xfc, 0x3e, 0x10, 0x70bd28, 0x25dfdbff, "", [@typed={0xc, 0x48, 0x0, 0x0, @u64=0x401}, @nested={0xd5, 0x8d, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @pid}, @generic="178159347a8b4c4014e654904af2e908d77934c2cb5f9f64764e29b28c486591125df1193dc55a1e30b7368c4a30b5e6b29bbc23be74823098fc721dbbc3bfb00a66afc0f82e1163b84ddb3a0119aeb5d93cd4e1e44d9dea65ad5f451dc2aaae4ec3d21ec430608284dbc50829294c38d9b2becba3b5838ab106f739373414485b86fc9a1b49683a839f52c9dd4145a8bb5b1285faef12126d7bc28a96960838905b5784101967a591bbf36ee66711c9153470130e", @typed={0x8, 0x2, 0x0, 0x0, @uid}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x200}]}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0xd6}]}, 0xfc}, {&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, {&(0x7f0000000740)=ANY=[@ANYBLOB="880300001f0020002bbd7000fddbdf2598002a000c0c788b7f6ea4b404560ab061f70e182545a38d900db9a4d3d355345b0cc4372ce508db63000cda8d553512624a9782157d3c8411fcf91fbfc18657b54c780f8682595d5228ecc9f2e85265d41cec221c2cbd0969608a1d313ad0fe6d9d72738b1f9cb17c06035f1ea3dc765764253be8086c32ac4e1bd50d1eb290776bb94d4bbd8902359b2563dcd1938b31a718476fcb9faebd028f8008000c00", @ANYRES32=0x0, @ANYBLOB="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"], 0x3}, {&(0x7f0000000040)={0x24, 0x1a, 0x100, 0x70bd28, 0x25dfdbfb, "", [@generic="cda1e1444c9f2ef72a770f5bcb70870538"]}, 0x24}], 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000008001c0000000000000001000000ff000000d546ae4c08dc4e68375a5a", @ANYRES32=0x0, @ANYRESDEC=r8, @ANYPTR64, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x83, 0x200040d0}, 0x4000000) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 03:36:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x40000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:09 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r2, 0x0, {0x1}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000100)="3bd0a3bad671daf6e256e33264b895ca7064906ba26423a972046844305418d69ca45b9699b1bb7995b5f3e5f72e54b7", 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000000)={0xff52, 0x1a2, 0x7208, 0xfc, 0x4a, 0xd, 0x1c, "58bc2bf13f329f6660b832700daf9e1cdb0363d6", "b1e57c752f624c11b854fe2ba612f5ead48ad144"}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc041}, 0x0) close(r0) r5 = dup(0xffffffffffffffff) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$input_event(r5, &(0x7f0000000280)={{r6, r7/1000+30000}, 0x2, 0x4, 0x1}, 0x18) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)={0x5, 0x5}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000200)=0x4) 03:36:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x29, 0x1, 0x100) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xde4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000340)={0x1, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1c000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf2500000c00040002000000000000000c000300f7ffffffffffffff0c000300020000000000000008000100050000000c0004000080ffffffffffff140003800800010006000000080001000104000059054109152f0feb8d36d7ee035a05450e45a28452ac659e8b67de1a5f76b57268bdcb20ee322bb66128120d628da7e1b84b1f5cf355fde3eb5050fe52e17482c2faa9f1c4b6e99a08065c67af26d22e6c2655d3c2e1ae8f9dca5fc466b2256ea3adc21ca3ff3118242756e68db4c8c9246361e2c157557efe7afce238045bf4ee57cf99"], 0x6c}, 0x1, 0x0, 0x0, 0x8005}, 0x20044000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000000000000000000000000f109756e00", @ANYRES32=r8, @ANYBLOB="0000ffff0000000000000000"], 0x24}}, 0x0) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r8, 0x0, {0x0, 0xff, 0x2}, 0xfe}, 0x18) close(r0) 03:36:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() tkill(r3, 0x33) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x3f, 0x2, 0x5, 0x36, 0x0, 0x7f, 0x40000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x72af, 0x1, @perf_config_ext={0x2, 0x8}, 0x88d, 0x6c, 0x4, 0x5, 0x7, 0x10001, 0x80}, r3, 0x6, r5, 0x3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x401, 0x4) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0xffffff4c, 0x4, 0x4, 0x2, 0xffffffff, 0xffff0000, 0x3}) r8 = socket(0x10, 0x80002, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x400080) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 03:36:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) close(r0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000040)=""/81) 03:36:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) fcntl$dupfd(r0, 0x0, r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000180)="81c4fa2410cd5f246649d661e7f6b5655dcca27c3522addf6851878b5b59bb4fbc1f46ff609aa8e1aed8965dac55c639014f64f86720c69ac6c5938b7465596138d66775618b4cd1c701f8c6c84b30aac41a09b9cd31e607c2ac29acc90a9ab49daa54261b14") r7 = semget$private(0x0, 0x4, 0x80) semop(r7, &(0x7f0000000000)=[{0x4, 0x5, 0x800}, {0x0, 0xf72, 0x1000}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[]}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x604143, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 03:36:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000000)=0x5) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="28d5a70fb3f6cacaa8c41f0516e4636bbb003f00010000f99b078d11548c284da04c09680862f643eafcd1d2942a914575217ba1ff019f23bdafd39c7c8e43ea9917c39f4fc44d02647b0000000000000015faebacfecac98e51517b2fde6683a3853b0100e100000000000e56497e7111469063515e01", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff62958ba5f23c58a6c6ce9afc65751dbb8f4acb2c74eff84b0aa072e0eb7195ba7194b0f766dbe4836d714128fd6c70270d462bf830bf7a59409f61ccf5e8dd56da2c97edee8a601741413eea2de7f4ac34fb47cf0678ffd6d1f569baf1db7a6cbdbb857a749e72fcf1067382b7af1b5992b6bff46cd4cfb2337f061d8759fc06d73b22afc57a26db7fbdc3f96c8fd14b4cc89f51eb2c6f531f1d5a0cf167aa"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0xecbdc8a, 0x4, 0xffff, 0x7, 0x77d], 0x5, 0x2, 0xf31, 0x6, 0x5, 0x4, 0x9, {0x3f, 0x3, 0x121a, 0x5, 0x7f, 0x3b, 0x8, 0x3, 0x1ff, 0x6, 0xc04c, 0x1, 0x4, 0xee3, "1f74293d669f6f7427b6b6b57a31556e22ed98cc207c5fe003c247ea980f2750"}}) close(r0) 03:36:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1fffff, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe00) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:11 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1188], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x2, 0xe, 0x0, &(0x7f0000001140)="09000000081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400001, 0x0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0x1, 0x4, 0x2, 0x1}, 0x1b, [0x2, 0x24000, 0x7, 0x3, 0x2, 0xfffffffd, 0x0, 0xff, 0x4, 0x2, 0x7, 0xa0, 0xe7b, 0x2, 0x80000001, 0x5, 0x4, 0x6, 0xa1, 0x2, 0x800, 0x80000000, 0x4, 0xc5, 0x3ff, 0x0, 0x4, 0xe0, 0x0, 0x8001, 0x1, 0x8, 0x90000000, 0x7f, 0x6, 0x9, 0x5, 0x10001, 0x0, 0x4, 0x401, 0x1000, 0x7fff, 0x20, 0x6, 0x5, 0x20, 0x8, 0x1f, 0x2, 0x8, 0x3, 0x20, 0x40, 0x36b1, 0x3ff, 0x0, 0x4, 0x82, 0xfffffe01, 0x5, 0x0, 0x1, 0xff], [0x20, 0x0, 0x1374, 0x1, 0x1, 0xfffffff7, 0x6194f4cf, 0x1, 0x8, 0x7f, 0xa57, 0x8, 0xffff8001, 0x490, 0x0, 0xffff, 0x1, 0x100, 0xa7, 0x1ff, 0x0, 0x2800000, 0x777, 0x5, 0x6, 0xfff, 0x8000, 0x5687, 0x7, 0x1, 0x7ff, 0x9, 0xfffffffc, 0x7fff, 0xfff, 0x9a, 0x3, 0x800, 0x1ff, 0x2ef3, 0x0, 0x80000001, 0x7, 0x0, 0x40, 0x7, 0x200, 0x200, 0x3ff, 0x3a, 0x1, 0x4, 0x4, 0x1, 0x8, 0x8, 0xcb1, 0x8, 0x80, 0x80000, 0x59, 0x3, 0x7fffffff, 0x800], [0x81, 0x23b2d328, 0x8, 0x8, 0xf1c4, 0x7, 0x63808fe1, 0x89, 0x80000000, 0x6, 0x101, 0x8, 0x7fff, 0x44, 0xc46a, 0x5, 0x8001, 0x8, 0x9, 0x7f, 0x6, 0x6, 0x2, 0x3, 0x80, 0xffff, 0x8001, 0x3, 0x400, 0x8892, 0x9, 0x7fffffff, 0x1151, 0x2, 0x8, 0x607, 0x4, 0x40, 0x3, 0x6, 0xd0, 0x0, 0x33, 0x4, 0x5, 0x3, 0x9, 0x1, 0xf8000, 0x8, 0xc6f, 0x0, 0xa1, 0x7, 0xea52, 0xb9, 0x7f, 0x3, 0xffff, 0x20, 0x5, 0x7ff, 0x40, 0x80000000], [0x81, 0x8, 0x1, 0x2, 0xffff, 0x1ff, 0x8, 0x7, 0x5, 0x7, 0x7f, 0x2471, 0x81, 0x2, 0x3, 0x2, 0x2, 0x8, 0x3, 0xff, 0xffffffc0, 0x1, 0x800, 0x800, 0x9, 0xff, 0x48f38731, 0x0, 0x8, 0xffff7fff, 0x5, 0x64, 0x8, 0x3ff, 0x5, 0x4, 0x1ac0000, 0x8, 0xff, 0x7, 0x4, 0x101, 0x20, 0x80000000, 0xff, 0x3a, 0x2ddb, 0x3, 0x4, 0x1, 0x0, 0x80000001, 0x40, 0x80000001, 0x0, 0x3942, 0x8000, 0x99, 0x8, 0x0, 0x4, 0x0, 0x2, 0xad43]}, 0x45c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000000)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x62, 0x2, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f00000000c0)={r5, 0x4}) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r3, @ANYRESHEX, @ANYRES16=r8, @ANYBLOB="deee3e291a90522417bdbb2682f329dba2998cb8b1fc33e8fe1d987dc4dafc08ca1b831f9d4225f4a60a0da0b5118ba3d9ee9f36fa63c41d6d12e266854fe556b3388e6e4156710e015a12a0fa36c7b5428e258bb8d74ed9c1118ef35e37f314c79970a5b3185b895691581955767214461f01bd357ce918c65c24e1e02675aecf6d2817598e44ef01b5883b67f34cb9221712ce72705926a8539aa8677b8b57868dadcc3e871f7c498a3520fc540d087201d275f1ce93ea3636a270d63da7ae647d9da2ebffd1a31f9dc82d4324543920bff4316e3e8146badc81f2a1eb85a8a681e24c7326f85cfb46f1383ed5b35f2b51a103"], 0x4}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 03:36:11 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x100800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:36:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000440)={0x2, 0x80, 0x4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r7, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001980), &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x10, &(0x7f0000000340)={&(0x7f0000000200)=""/211, 0xd3, r8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3f}, [@exit, @ldst={0x0, 0xaa7e709a71f2c11e, 0x0, 0x4, 0x8, 0x4}, @exit]}, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x8a, &(0x7f0000000080)=""/138, 0x41000, 0xa, [], 0x0, 0xc, r5, 0x8, &(0x7f0000000140)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x2, 0x7f}, 0x10, r9}, 0x78) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000e40)={0x1d, r12, 0xffffffffffffffff}, 0x18) 03:36:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000ee7f000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffc7b638e2"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000000)=0x7f, &(0x7f0000000040)=0x4) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0xb6fc5fa32ea6c0b0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x0, 0x80) 03:36:12 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf00) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = gettid() tkill(r8, 0x33) fcntl$setownex(r7, 0xf, &(0x7f0000000000)={0x0, r8}) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x7, 0x3a2e, 0x1ff, 0xfffffffffffffff8, 0x7, r8}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r10, 0xffffffffffffffff}, 0x18) 03:36:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="11aee5b26c280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) accept$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', r4}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000e40)={0x1d, r7, 0x0, {}, 0xfe}, 0x18) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(0xffffffffffffffff) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) r10 = dup(r8) ioctl$FIONREAD(r10, 0x541b, &(0x7f0000000140)) ioctl$SIOCAX25ADDFWD(r10, 0x89ea, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) close(r5) 03:36:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff, {0x1}}, 0x7) 03:36:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001ef2000000f9ffebffffffff060000001e8cfd4e37a5c32ca346e418f3450aff5f15082d0d70b1fcda9002c83de45805356f5887", @ANYRESDEC=r1, @ANYBLOB="a8a6656c7bebd033d4feffffffffff62"], 0x3}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:12 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) close(r0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) 03:36:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'erspan0\x00', @local}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:36:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x13) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:36:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r2, 0x3, {0x0, 0x0, 0x2}, 0xfe}, 0x18) close(r0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, &(0x7f0000000200)) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) getsockopt$inet_int(r7, 0x0, 0x2, &(0x7f0000000100), &(0x7f00000001c0)=0x4) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000080)=@canfd={{0x2, 0x1, 0x0, 0x1}, 0x3d, 0x2, 0x0, 0x0, "94b211ef6ce40bf18307a7077b739ce5ef2f500163e5d7daaae4d5f4807be051e068214c40b9f47c5cd86ea4f7eeb854c28fc24dd53a8388f850bddcaadcb12d"}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000094) 03:36:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280200000000010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:13 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x1400) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r9, 0x89e7, &(0x7f0000000040)={0x5}) r10 = socket(0x11, 0x800000003, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd23, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$can_bcm(r8, &(0x7f0000000080)={0x1d, r11}, 0x10) 03:36:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x1, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:36:13 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f00000003c0)=0x3ff, 0x4) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x2, 0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000000000000200000001000000000000000000000007000000000000000000000000000000000000000000000000000000000000000900000002000000000000000000000003000000200000000000000000000000000000000000000000000000000000000000000002000000000000000000000006001d005d0e00000000000000000000000000000000000000000000000000000800000004000000000000000000000001e7fac2cc0100"/200]) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000340)={0x9a0000, 0x5, 0x80, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9e0903, 0x9, [], @value=0xfffffff8}}) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000380)) r6 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="d53b77af4710f97b781364023ef5bd8aa3cd1f105c569f1a6df0419cc6fa22feeefbc220afcd66924ab70411e740c7fb6d70b0443ea8a3ea96e90d3e17d16a9e1827b07332fed635522e0d2148c0a650ee6c9b9ced975f3b8897dadd2e408022df3f199ad26be2905fb2526d5966e333353f08d088825f7152d1c16e793b3f1da2f37e365296ff6f1a6dc30eb4eb6db1d77e8827bf28b9e1ae68aab8342a99f879d0b7ad54979f0f4725047f1be58ec842dd736b90d1"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4d0c1) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000240)=[{&(0x7f0000000100)="30719150c75d753f7718514618946deab86ceff19cdae603d8f831d9c1289d3bacc287b2b086c02667998a9fd8acb6ba092c7af1f8b93410697e1e32ca65171287f774a9a94c951b3c3432d9e5283975dd56d52e0da4c6b1f600e32f49eee250c7832c9dce4a67", 0x67}, {&(0x7f0000000180)="5cfe545fa3eef5738c57fbcddab88212d7207fe2452b4bde505ec44e29f4b2899dd4ec8055c15f7b0fc51e449e77293e61fa78135b8e562bd04ab5147da84163cecf2de9d0e23e4af41aa170a46b52e8fe99e4f8565955a2048f9db0a92d829371b269f2c86c159dd5efc960ed82cb2a7b218d35d65dbd3484a6e0be78e7dd9ead213db021113573779d196164812aeeaa", 0x91}], 0x2, r7) close(r0) 03:36:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}}, 0x24}}, 0x0) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0xffffffffffffffff, {0x0, 0xf0, 0x1}}, 0x18) 03:36:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:36:13 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = dup2(r2, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r5, 0xf, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x119500, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r8, 0x40044145, &(0x7f0000000040)=0x3f) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0xc6) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x14) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000000280)) 03:36:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f0000000000)=0x9) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000080)={0x5}, 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) 03:36:14 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000000)={@any, 0xfffffff7, 0x6, 0xfffa, 0x800, 0x100, "bef29fa71992806e7c2e051cf1545601bea1fe47fd2581cc944c6c8e619906c69968acd3a4e85b414fe86ff61a6cc8b4a080941f46ec2936cf5e2cef6f7be53056f2b27e0188bcb4c46fc413d9411734c11390cc4720c0282a805d12390a6408b745a9635a3ad5a9d003b2bce674dac8bc8d0e97ac156dffb8fbccff64a49884"}) close(r0) 03:36:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) readlinkat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/90, 0x5a) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:36:14 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000e40)={0x1d, r7, 0x2}, 0x18) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000e40)={0x1d, r10, 0xffffffffffffffff, {0x0, 0xff}}, 0x18) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffffffff, 0x44c00) 03:36:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x3000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:14 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x5, 0x1, 0x6, 0x1, 0x0, 0x81, 0x0, 0x23, 0x97, 0x17, 0x1, 0x5, 0x40}, 0xe) 03:36:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000000000000000000041c07c695e71157d8c872243c25efb0000", @ANYRES32, @ANYBLOB="00df80000a00f9fffeffffa6ef669887504584c2d977a1067e550d7405e5f05dabb7e9c49734b3b36120a0734f1e32fe7a4217bf13c945cd12853bd66b06118cfbcc7e64de5805347891da3735150fb92636c717884112135e9f9b2146b69144c287dea9de06611139c09e9d6ea98e7d56442ff01908f80ea329ba46f4482f9a5fbd59f6cac4420094594a366a6d2ea31efb8f68a7749ab71a47dc8c3b715ebd1bc382aeb1fbdd5df6d2aca3976408b11f29c98c96c6f28dda9bbaf0a535e2280bbb3ed7da5a12b77499bdba91b066611798fbc47420eec44defaad45fc97367cdb94b9bf17595798f02abd046c7b23f5d1383302cf764d9"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x58, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x20001810) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 03:36:14 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, r2, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x254, r2, 0xae0b6bc1fc4bcc86, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xad2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2d39}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9db}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x37}, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @rand_addr=0xbd}, 0xfff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @rand_addr="8993bd13ca60aaaf518f611c283d5d3e", 0x5}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2931}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1cea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x88}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:36:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000408010100000000000000000300005762d5cec1bd399145748ec703d12d2f0a0c00048008000541000000010900010073797a3100a3312679000260101c000014000480080005400000000608000540fffffffd0900010073797a318f00000000", @ANYRESOCT=r2], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x0) 03:36:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r5, 0xf, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000054) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000e40)={0x1d, r12, 0xffffffffffffffff}, 0x18) 03:36:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={[], 0x9, 0x7d1, 0x8, 0x0, 0x5, 0x2000, 0x10000, [], 0x3f}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32=r3, @ANYBLOB="000080000a00f9fffeffffffffff0f950b68a75d0ebdb1360677930e1278b10b468701c4d4e90d576cd6c25916c6228a96ba77582f1e1016b512c2275233a0ed2db260f7fd5cf2b3bc38be6ed075a7988597a28948cc802261f3a6f0a78967b85bff0f6fb0f75b3c703ea2e5f095760c0849f990d861cd3e3e9edbff8ddb74ceede788e9d771555229b0b72d79bb3ba0c0784d11d000936ffd5d3a4f79653600"/176], 0x3}}, 0x4) r6 = socket(0x10, 0x80002, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[{0x101, 0x4, 0xa6, 0x8}, {0xfff, 0x6, 0x3f, 0x20}, {0x7, 0xca, 0x2, 0x1f}, {0x6, 0x0, 0x3, 0x47a}, {0x4, 0xf8, 0x8, 0x483}]}) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 03:36:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x103000, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0xff, 0x0, 0xbc, 0x0, 0x0, 0x8, 0x66}, 0x8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) getsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) 03:36:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x3f00) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:15 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @default]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000100)=0x100) r8 = dup(r5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x14401, 0x0) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000000140)=0x4) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) close(r0) 03:36:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xd, 0xa, 0x901, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}}, 0x40) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x28}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 03:36:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) sendmsg$AUDIT_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x3e9, 0x20, 0x70bd27, 0x25dfdbfe, {0x66, 0x0, 0x1, 0x0, 0x5a, 0x2, 0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r5, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) 03:36:15 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r4) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x2, 0x3}}, 0x26) close(r0) 03:36:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5165e0bcfe847a071") socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0x0, @dev}, r4}}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r6, &(0x7f0000000280)={@void, @void, @eth={@multicast, @dev={[], 0x2f}, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty}, {0x0, 0x4e23, 0x8}}}}}}, 0x32) splice(r5, 0x0, r7, 0x0, 0x10005, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x2) 03:36:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = msgget(0x3, 0x200) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000040)=""/154) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x35cd, @dev={0xfe, 0x80, [], 0x3d}, 0x401}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x401, 0x5a0, 0x7fff, 0x1000, 0x92, 0x1e1a2e88, 0xfb}, &(0x7f0000000340)=0x9c) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x1, 0x1}}, 0x18) close(r0) 03:36:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32, @ANYBLOB="000080000a00f9fffeffffffffff6295"], 0x3}}, 0x10) r3 = socket(0x10, 0x80002, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r4) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0xd5a6352b5da52e93, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r7, 0x104, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48040}, 0x40880) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 03:36:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x4000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:16 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1188], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x2, 0xe, 0x0, &(0x7f0000001140)="09000000081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:16 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x105000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) close(r1) 03:36:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x80, 0x58) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x1) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, 0x0, 0x6, {0x1, 0x1, 0x4}}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x200000) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r8, 0xffffffffffffffff, {}, 0xff}, 0x18) 03:36:16 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:16 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) fcntl$setlease(r9, 0x400, 0x2) r10 = dup(r7) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) getsockopt$netrom_NETROM_IDLE(r10, 0x103, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$can_j1939(r10, &(0x7f0000000000)={0x1d, r3, 0x3, {0x1, 0xf0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:36:16 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:36:17 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:36:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x26}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfae1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) 03:36:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x4f03) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) 03:36:17 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x7ffffffff000, 0x0, 0x0, 0x0) 03:36:17 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) ioctl$FIONREAD(r11, 0x541b, &(0x7f00000024c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x100, &(0x7f0000000240)=[r9, r7, r11]}, 0x3) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r12, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x33}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000) 03:36:17 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:17 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x4b, 0x0, 0x0) 03:36:18 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x3f00, 0x0, 0x0) 03:36:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x5865) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = gettid() tkill(r3, 0x33) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = clone3(&(0x7f0000000200)={0x10088c00, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x10}, &(0x7f0000000100)=""/18, 0x12, &(0x7f0000000140)=""/27, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r3], 0x6}, 0x50) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$TIOCGSID(r7, 0x5429, &(0x7f00000002c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="68010200", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r4, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r5, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r8, @ANYBLOB], 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r9, 0x2}, 0x18) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000e40)={0x1d, r12, 0xffffffffffffffff}, 0x18) 03:36:18 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x4000, 0x0, 0x0) 03:36:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) r6 = dup(r4) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r6, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, {0x5, 0xfffffff9, 0x5, 0x101}}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) 03:36:18 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x4b00, 0x0, 0x0) 03:36:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000000), 0x4) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r8, 0xffffffffffffffff}, 0x18) 03:36:18 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x60ff, 0x0, 0x0) 03:36:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='vcan0\x00') r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x549100, 0x0) sendmsg$AUDIT_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x1, 0x70bd25, 0x1, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) bind$can_j1939(r3, &(0x7f0000000e40)={0x1d, r5, 0x2}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000e40)={0x1d, r9, 0xffffffffffffffff}, 0x18) 03:36:19 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x7700, 0x0, 0x0) 03:36:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8804) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) 03:36:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x6000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0xb700, 0x0, 0x0) 03:36:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x207200, 0x0, 0x0) 03:36:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0xff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_DECODER_CMD(r10, 0xc0485660, &(0x7f0000000040)={0x6, 0x2, @raw_data=[0xfff, 0x6, 0x6, 0x1f, 0x7, 0x1, 0x8, 0x598, 0x7, 0xd450, 0x7fffffff, 0x1f, 0x7ff, 0x0, 0x7, 0x3]}) ioctl$TIOCMBIS(r8, 0x5416, &(0x7f0000000000)=0x101) 03:36:19 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x400000, 0x0, 0x0) 03:36:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000e40)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000e40)={0x1d, r6, 0xffffffffffffffff}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000e80)="90c3a8328c283bd06ada775122de4e5f93012097ca2e07af2b198b0e2a2cbd8c5c2b846ae7693d48521da1396f082864747ad75560ec3bd80f28bcc8c8289759f05596966d3b47373b49c3b7cc1eafea98b7bd38e05707ae1dc4da6286909dedf04593f5ce67674e818d183f2cb2f431ed1d72612b98e897ce347d3e0595f5bc99d1f355d436d45f0b2bce765a96fb145192bf8a7f36a5a293206f5a0a90026ff60a2ea38eab96f418f38fbee2ccfc85c38f23158a579d9facb68f63a5665fb362ab51d0345c792b25efe814802b5bc0b87608378966e6aa92711cb1f96ef40c18bb270bdb443f8353d0c027c951c43fa6a5bc878d80f24dec4a23772af9a43e14ca3441085b0ddf3b0f50224c81d19c46c171ef5ba02b203cdde18dbb03768ffd8920598d14ce1da4579e11298f3ed4524c393a1661d203a0f608a4e0e43f98c5f457f33be4ab8eccae58343832c2a42b26b68f36fb4abc9c2544e69cbec123361fcdf236c4a3249a46153091956a8fbb1d167d0d7018ee6e7a2984254f88b2ad9a6e9a278d54108cba4ffc488a9cebb3ebe527673b0946951df3472e0d775b1a6745b15fc31ade7f7668368f9457df315fa6de72c7678435d23872da2f4d8f5f2a8a295b8521bf3cdad95f67ca2684d25a382ac4b78a68725705d1b912fa19bbcf0a05c3f2111997faf0ff47a8b55d45955685fd8b487cb0d861f5662b22279acaa949dda831aeed6598d235e79cc41c868c040c10895d923ba7c62d355f744f52462427768f5b9d1672525b063e9d9074664fbb096d24fd8379aaab3ea37be03c49fbde4310f27db46f521e6d4682a0dc6463f19a47532c0f41d560b7355367d35942b772ccb497147767c5eb1e542557b698203e74cf3e2555405c4f21c7ba3f87fee64ab86b0b10b4988c4eb4fc2d84efce876366633948821724e0e38d414a825263af72449059d5c065def81012d79f2608677237a25ad9eec62c814825c5557545d915e9114d126425ce613badd28cb6c2431df0f4b918dff45d86bf55c6af0d619916969441cd5f67b5264bac7b5a8a3c6895a53a0654fa904918ac687439e43194806170409743c263b0e5b6bee033a17b47de657cc93e38959bfe706e57c060853cae4d7b5027f289f518ea5789d08b0e2121cdb9c76cc050135759b7804193fb8dc0f4bdab42fc6f7e49219dc3d77cd090fc3da12c994bc3ab5b4cd51e6dbefe7982627d318e5731537c14d9c3b5e2e293089278a1326b3b7a1cde45b043acee5b1826dc377ecf9b247313f4799e60b84d596113b5947dcce679f184782ab333f13312927cbb4ae7840eb3f7dab84ead6c0f6ad43f717f26012e2fe0c9d6ebac8b0d7eb88a6a8431bc3c653c4262e55ec784633bd138b3ad810ed61b6cb4431654a9aa43b6606991483aaa3bee17486ae0acb38889fb6ddf1040b2f22cba4d5646141ba23de48fe8294a0b0e52abac9918b534a8b2717310f20f1041e83bb8c23b83b83edc30085e196d58a9981b77ebeeae05524c093aeda3b1e8f55c4dc29d28b81bbdb90e1476ae58edaf3d7ecddc773e9856b2126e1e961913cae6a17fad7f7d62d5736281e788c7e2d8da2a7d485c0cbe09445fc4b7a5a3ce5bfeeb2b723e301e04cbfd38aad90b9044946c4d1913589c9f86e3bd721704af5def58e170abcb0dd065d301c44e875655e86ac5fa861e425367dd727f3aece20d39912b1a620323e13b045d9d7b2786e578ea145f7bc933d3f8e6baa5f8777ced3a29ac9ec9d29418d45d8668aaaf93c5e9f417aa7a8df22c5bda414d1e89852d8e51c6bbaf70058848eed965ef231852193521c08de96ef591041011304f0f61839884c2822a02460dd840d44ba0e19cf7aa7ed6b32f3dd01ed18e8f1e6f3408b6fab58e8183f0d2b1b4bf6139502c427f99b5584263bf70b849582c2216cc26946f124d3de87e309a74751e044dd7f3fe871dc78be4fa2b13abf71ce6f9363a993ab0baf7a9870e3137e8bacf90fa582c89fa4c930be9e6718b4d4b0132c311862867dada071647e283523bbc38a173346b29726ce86c396ab197ad209b5d74c3a6683f7de99b74e2bf0ec6fc4fc6a6c21c74be22f47cc413a740d8b9596c362925d97078a2a56b51c782de190b6bf68c9ae1faf82be649ad51296ce19b330cf09c2708dd8c1f6fe8a5c2c55bd2805fe5dcff32ca194545fac715db941f03e22804e2accd0ca1f8601535cd4d968b52c369f64c46e666d37ec086c2e321bb4e503bc0d3805d72f3318762d6cac9ab221fff64953a350b79ce1f93cfa2eb4259fccdeffb6c5e05fc54473181762e241fd140082b02719131a10d84682e148fbf2eb74a584a4323d75c1c0a108a3ea2cf5610269f69fcfbd3186b248b6bb78557a5ef262304afc9a3f58602fba3eee1018f5304de19735ec95a50a1e954cf038815b419a8efcfbee09cec991f750273379f40efc54b3bf2e0d3a676b469caabc492ed8fb3ef41f947c24b5119e34a9e01a2773fecc914422c4e0e3a99e2c9695a4e6d0a8dc606fc4c1dae1578f338f11b76b697ae271fe0874c5a25fdb23edfbaf111f66235eefa814a586591021a047bcc3d635e7601df9adf1aba2d44c984c67b7008c01edafe3a310429307177e7a44367e53b61728acece72d481604ff63974e5ba13053fbd5468a88583f2ba3e5b8e1e8d7de5db539600655862d0868fa8b855028a5604b89e0ae2e1d00810b18769ad8dfd88871441a8eaac2880be4659c90b9ea72259cfad87d7cc5ddb97fa05f05a476886c42081ec4db2241270147570a2a042c798a3f83dcf6fa6372bc3010f337ba58deafbd28b93097f18ab3d0c7250fbe66ed24a2417bc6146456423d74d8c3a23bed9276ad20f97524ba75b25290a5219f4df5c24afa14af7d2843d9dc677e07776334067fdb45c351350adb5c2dff51497c393c2475b21214c78e5a2d765cf1956b1b30e288a301eeb6f512ea0a5aedc001c6c306261f8d439afc010605d6a01eb0524ab8c5b710acca583d8416a70c3c780e1727490383054e1afdc167418852d4b84b81c7e8319a2f59c675f71ca5b8986d4b3ab3532a6f85cd95312afa14970bcd8365f90a5c4f2c35f01c22a810d5bfb7b45c90bc176f22be166582da0d8dc2ed39ecc1ba66f491ef0f7d3e056b4c68cc074c91ecf29533790e6b578cda2b458ca4505c2379dbbc6ebf2b95a8cc6e9b1c157ef96a493bdbb7a931d98ef64e26aa662903c47ccfdcbbbc8c674af3fd2887c1df0d50b3b412ca9ea782ee86b8c52a8b675518b9ec6d50c5252e020d0473413dc5396d4d13887884cf6b1a541508aa36769bd0f8aecf83c778f6618be5a50f9755a79a314698970f4a5df9277f14348ba3f9cfbdb9da20a0e7e6bea3007e851415aa1d36442bec0fa8ed81997e2a7082ecd998dea6e339ba0ed0dd64d7328ccce11810f8533a77169a4c3cf415c6821b4cd666377707d2254c31b6fc0236ff70a3b88c0163cda68a269a865e27fe5c949b89d8c22c6e864564c1341a6189a823c46519e992987797f15615d3c8f1922c0da2280a0b0e2e0483cb80324a76cf6d427e7933fae6c4e54a04658144efdf36a429bbf24520414439ebc3f11bdb2172e3a5d992364f8d0ac230ddc3603f309686ba3f91eac55a2198c1970b0032f4ae685e4f8c3ca8ad71c85ce85aeba42079f6f5c16ed7c7593fa9cf19713149baebb23cb0354ee0fcf8903c989d79782bbcc85f1cbeebcc4af9afef8f986574d67f85c8994cd5fda40d1865ee36063474f4ff6b6d7e7b5ef7383da83edb05a766a4f89eebbda6253d57306bd262dff2636f45942a0fbf585d6120f52a0d05dc9998315c63b9c26308d83b22e1c5bc6481a8365ac938dbbbfb2aa0dd96b2c6361583ddaf0cee00376c47bca64986ef19d539ebac96b408fc6efd9f0e0bce6c363cdcef60cc879fc8936f2f8de0174e180a25564ccac86030d6e117e2154b40fc942bc750412b14f346b6d713f951b3f9150e449e1cce34255f0a38c7ac1a3c2c368d3873bcd4c553c3c58925abc2408ce7450a9bd82b38ab57c907611956e5f7c99f63514f0d4a8f708b1928c557a7ebafd3ef76b97011faad795fdb3095c60149faca1902d0c1b65af28c8e76385d8ff04dc49e7275aa26b2d92b1a72e2a957724a2e5ca870f6e3e3c69357fc53e3afdded40d9979a7d29fcb65da1f7b817df89b906dfc56098565797bf2a1ca9113a684d82011a1d93f313e0bef9c5f2343178974253911d54c7cba408226704ed46b8f26d768da3d149f16b188a1b20b96be6c6420ca4f9fe8002f939dc021194fe4189a355a8438f61fdef90d679f25e3d98adddd25e3e8606cb0d7b9e403d49ad913fa5a0226d99ab48ab780b2e6adb5c2cd9736e77af56abbd40504e9b651bde58442f507db7e2f35857810967f6390fea29c383dfd3020d8091dd7cf26e36c53e6dc92f53842d8bd3aa76dd29d122d95e9379b918ffcfaf056fba3dae90c50697c0b4f9aaed962bd7f3c41399767b523e68ac141aaf2e57a87b3613755e96c9c1694fffcb804850238d95acc92d9d9e9b9019f10ee67b7a228ce2f64f7130339c5208239eb13cd34ff7873eb2721de7b9ee061b4de00b47f02c56ad2fdc36b9266802afc21c6c5bf0094c470d7cbc53ebb181592423d91ea131d6eafceb232cdb2c5a6c0c54424be133ee63d907fe2e8672d6071f6aa6983a390272ac3656dfd5cf08970b29fa81216beb025106735f216edeb28e32a4f5f2f551c1921d84a09618760a1280abb5995c5e5c1d079b58ab47a4fbd81d80765287d56120a60e433540669e5c3003e8ee9883e2b8336adaf0f5ce1a5a78877442babe702eddda47e7a32186774d151ea94e275647eaccfb83d04461de704169e151297fd5d9f352a74904743f534a7620afec5f6a6b56506934ca8efd060fb8eb3cb65af471094d727b06c37120e118f37268138c15728a3e566b1af4607787d5cc860d7710021e358e7c8890f816be112b46c98fd923a8f354c4bb20c8f040229351389af12c8a313c8b28e3a15dc5c4fed3cea304cabcd5e20c2fdca4aa99e3a05dfb1cea42567c0883f024a36dba78f922d864d077cf772812a9a46fe1b625299e52174e5d3c519ed55c565f7ca6611b8f6cf24b896b66d8152b041110aeaed338507db1f5dcd25ead4d3f677f7e55f35e5f537ee396e11312c4ccd236def65a36c42ff1d0fc1aa695f077e413c02fcac5ecdb0a3a07115b01a935cde8d26ef99cc2bb53b9154fa320b219b17399c1626a81661ee9ed7c6adcd4474150db17fe2cdebda12084ce32541e031a91e3635209d03c275a67d0fc241fc330cfe688ada016b4411c1a4ae35016089a8c5f8b99d01f73f2624076d1929737bf4fbf39474ecc1826a2f5024344803b691913ddb8302a66289fb82a5b3d9a0f5f2b7052a7f5133fe348570eee05aad10977fa917aef007d2ad1fc348223c1d02feb5de6df9652a4ab99ae3779d7e4b610cbe1cf6170abcec3a248ede2e809803f6e2dd838067c5815685497c144218f466cf1e29d4701686be08c5fb865bcb7e5ffb9a758760a95aa5eb965f9aa2dfeb763683ad16c97da9351025af95924232cea06c5718c57fa5faac01f97652439d183822ebd55a9da56ac645cf4af08dfaa37d611a6d38b2774622f2de30929045b2a4f63abe0d502188c117a9c4cae969a9ed49e21c238be066f321af282ab5cd84f6934a003f801714c9fea9f552e8649f47db0a509b5e9774509897b45c1ea8235706") write$FUSE_INIT(r8, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x1f, 0x0, 0x200000, 0x5, 0xf4, 0x80000000, 0x56b7a67}}, 0x50) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 03:36:20 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:20 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x51a000, 0x0, 0x0) 03:36:20 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x6558) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:20 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:20 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x719000, 0x0, 0x0) 03:36:20 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:20 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x1000) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000000c0)={r3, 0x10}) 03:36:20 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x722000, 0x0, 0x0) 03:36:20 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:20 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x770000, 0x0, 0x0) 03:36:21 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000180)={{{0x0, 0x1}}, 0xe0, 0x47b, &(0x7f0000000080)="056c7f01dda45019cf789089a0f2526d7d1c74654ccbf320e5721bc53e8a2d57dc3ec31ff985a52a8a45b9a7e52e033cdf6ce9a2e91896ea9924beef1fe6d669fdc3beef5a5cf54862fb3fff8704f869ec09f9f0b98aaeacd525b980bdb6eac04b655c63fd71638ed5d51da59019bada36e4bdbfb70f242c87bd616dcdb4e93b2d955bc679b67051662755d0f4b91ac4d9eaed6226202160081e45fe04d1ba68605c26cc088c8c90bfe83646676d9101f155a1d18166b7b9c24ac789c08035dd2d58eeae0bbdd8fa4e7dc389c92708bc1c859d07b3384c6a2b444fc30c1b68d3"}) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$RTC_AIE_ON(r4, 0x7001) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000000)={{0xe3, @remote, 0x4e23, 0x3, 'dh\x00', 0x1, 0x0, 0x18}, {@multicast1, 0x4e20, 0x2, 0xec1, 0x6, 0x6}}, 0x44) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r8, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x907100, 0x0, 0x0) 03:36:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x8100) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:21 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x6, 0xfffff7f9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="002a3180ed88289a439e453725c868e2496017b910ff00000000004000"], 0x24}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r4, 0x4, {0x2, 0xf0, 0x1}, 0xfe}, 0xfffffffffffffc5a) close(0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r8, 0x10001, 0x80000001}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r9, 0x4}, 0x8) close(r0) 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0xa05100, 0x0, 0x0) 03:36:21 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x1ca, 0x1, 0x2, 0x2, 0x8, 0xfff8}, 0x20) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x2, &(0x7f0000caaffb), &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r7}, 0x10) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0xb70000, 0x0, 0x0) 03:36:21 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x2}, 0xfe}, 0x18) close(r0) 03:36:21 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:21 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x1000000, 0x0, 0x0) 03:36:22 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2000000, 0x0, 0x0) 03:36:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe40d) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:22 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:22 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = dup(0xffffffffffffffff) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) write$P9_RMKNOD(r3, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x40, 0x1, 0x3}}, 0x14) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) getsockopt$inet_udp_int(r7, 0x11, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r5, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, r9, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa8, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x24000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xedeb}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7b0b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x1}, 0xff}, 0x18) close(r0) 03:36:22 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x3f000000, 0x0, 0x0) 03:36:22 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:22 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x4b000000, 0x0, 0x0) 03:36:22 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x3000, &(0x7f0000000000), 0x0, r7, 0x3}) close(r0) 03:36:22 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:23 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0xff600000, 0x0, 0x0) 03:36:23 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair(0x3, 0x2, 0xfc79, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:23 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x400000000000, 0x0, 0x0) 03:36:23 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/221, 0xdd) r1 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) accept$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) close(r0) 03:36:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x10400000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:23 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x60ffffffffff, 0x0, 0x0) 03:36:23 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0x4, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2, 0x800000003, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x100, 0x4) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', r9}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r10, 0x0, {}, 0xfe}, 0x18) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="ace360f68e05180c425b32115bc40ed646dc7b528c367bec554fb9f04b7c22c910c8636b2d4d014233dd92ff0244055d452d845914866673f35155dc2ff3d7150f563a5becf5dff6b67b2b1b7ca1a2359ac55e657e4b467c30c26d5d616cdac1a07c01b8ea2144c3656d2e291c1a77c825368986db229fb54578d1239c154757d7ed87c14bbfd9ef2caa265d52b2fd5c91", 0x91}], 0x1, 0x1) close(r0) 03:36:23 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x770000000000, 0x0, 0x0) 03:36:23 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:24 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x7fffffffefff, 0x0, 0x0) 03:36:24 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x3, 0x1fffffc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x34000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000080)=[0x2, 0x3], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r5) fchdir(r5) bind$can_j1939(r2, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r2) 03:36:24 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0xb70000000000, 0x0, 0x0) 03:36:24 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup(r4) r5 = dup(r3) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000c00)={0x7, 0x7, 0x1}, &(0x7f0000000c40)=0x28) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f0000000080)={0x80, 0x6, 0x7fffffff, 0x358}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r6) sendmsg(r6, &(0x7f0000000bc0)={&(0x7f00000000c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="aaaf85832f79e530aa257176718f01ce9085e1ed8e7043", 0x17}, {&(0x7f0000000180)="593ca6f5618915bceddd5debf05969e31ed36b4687207fa0a17de40e0c1a93a2e4757e8ed736e5ab10512b9973f8315aad7a2a9fd94888aa08797c0f3d95aa58cd743bb6ecd9994178624b0599408860d9ee1fb9c4b72f220a850e34", 0x5c}, {&(0x7f0000000200)="e4f61f9e5cfd19bd172246c211381d", 0xf}, {&(0x7f0000000240)="c299bb01947c0edc4fbec1b3be4a1adec102c47eb660a64002a389e39f7199455fac6ed6abf1d970f76fbac98724a83a73c8879a6fd63ece6400830a40fc7915640a4beb2986fbc7155eb288cf8b016afd2f8d37f638356b3985cf155651970db0d62a6be9b09f72a51a7897663ecfca432e4261f5bdbf8899ecfa4069e3ac10a9cec0fde087f4dc0df869", 0x8b}, {&(0x7f0000000340)="d56d6f04aa65696bee5bd049a2a28c0f57ea967c03ea7936c63f6464b1b65fa799d1ed3340488ef9d4b428149532c2200f93ca3f6178faee610a691dddd615bb9eb5a53bd39185d7954d35e62c798af28968413d3dbf1565741064ae6150c312b9cb7ce7c1c4394075f4b17c7246cd7f9962d77cd8e79d466628f339e9e3e1e5b17ad37728056f717f4a2adc511bded0769989f19b7a926514a254db16d4cf83063d4383727957af505fc051bac493744d8db8335520681cdb5144", 0xbb}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000400)="3220d6df07a1cf8da5a1cd3089f92e5505d9aebf664f961c8c448b73ebd06de1c6c5285d036b0c35fa23c009145f7d1fd8b9809f115413f72c045c1ecad475aeb36a88d4727995670d269482f146e2f7495413a9f4b386394788adea3e1d3f403c20bf111aa6c890084ce3c65a17825d8ad9c432ce39ae2d2a0233fc976f393460938e0c3428781f3ff7dd9aec4dba954c00df89292e9b23da9f11e0003192f3f69da6f20ebe5d10f27ac64e4e736eb3f9dfaf3d654ff2565169a8dd66e0dcee78", 0xc1}, {&(0x7f0000000500)="d4c84d98470cd4fb5c806d15", 0xc}, {&(0x7f0000000540)="4e75edf6070788f764e4cb7948b3a60b02fce9a543fdf552a7ca08e8ed5673c92db47caf77df2347c5f3d6800ad976f374df7ab0b505767a076be5f503408da523c79c23514b56106e3b2070e6c551a7af05e17e0c8cdd68d2e6c8a072a2408a7e2c980e301c8a043f7a3aa6fa06e978026ef2032ad75053b5ea69b46549b732868f559264f288e0615b3bfe95a1db80ba7f0139fe31742a7129b3578318c48e2aabf7d773f8dfe363527dbd804a9d79713f9e7f8108f279029d05d1fab060a4cd5c65236faf1bc19503c62b944330033a48e210ca9d4883dc99428c240acb74a080eb4cd547aa314e", 0xe9}], 0x9, &(0x7f0000000700)=[{0x90, 0x112, 0x9, "942c18423587c6a34963c53b5b773d82817a0effc66a2fdd25d3a9fe4abe8ef7973827f26cd75889ec00d520e6c0ac5914274c861feff616a316dd3f6e433bc6b68e8d22630e53b982a7bb13cf09b03f939bf24663d64b363e98992683e58a5832b491ddb7c1ea35d98c9599fe55aed2df3fd56fbf94324ea0"}, {0x18, 0x111, 0x4, "8c7b8d20d6"}, {0xf0, 0x88, 0xffffffff, "d02ae685209739285ee23706c0b96a5b8a90046f509be709151dc642bde7154197941d4841219195b72dd196b9e8f7c3cf9d9639ca3c8ac55396ab86651144d713b3856538341746f2cd3196449db3dbe6bd74e857d9f8edce1b57524b32c2fad883c845cadd8e47487b55222a708c669c031acd462c66e74c144a3cac90c4877b6ae85a315698edb37bb6355f1b675cba5bb62fbdaefdd7996e982d08773858845fcdf62fdf0e947df6b2261f6275bff4d3e9d6c6e07c2c32c594a46e93f46dfe518617458f7c84616750bc138ef773b4786772208d0d861c8aed"}, {0x90, 0x103, 0x4, "3e4253a324860ade58adeaa618cd3549d5a3240fec5b00db0c856696c952efcfd0a99f8b95a589afd1d46b732b435ed54baf2e8d162ef48acb71555616ffa0c98822aaa3aa8fcedee109365ed3bf4d2aa4e8495b9bf9633169caa37fb2cdab7dc97d6efbd91afbad8b78fd3d97bfc46dd957bfba76a6f9eeda7b5f506911"}, {0x88, 0x111, 0x3, "515b9c8dd3f589861ebb7434058ec209231d4db847b86b0567cd1d3db6ae2dc959761a49fffeb3fe11232bd1f6f51f2d874e9fe733f7f6dfe8640ce0b1e4107be5a96a996ad05ffae1533e5c586d7c1b4fe956e36f757e634c6c3e28d186d52af5c5f5cf7b0bcad8fb9eead136218ebddde3568c45"}, {0x48, 0x110, 0x7fff, "af89619116fd6f3eeb9b67cb700d2ace4ec38dbdf50da48c1069da9d797d63ea5f3fe93e8566bed881e9322687ecec861c0aaa"}, {0xb8, 0x10d, 0x1, "0bac4cb5a62fe3ac999f1e37f48ae380ff8d721458d7dfa0e57970908ddf69a185debf8aa0828e06ec9f17dd980c19a3f6ccd872fe1dd4d0e72350105d8073e101837edfebafeb501b6e17ec0e0ab391fef30a6fa4ddae648a41b3f0522d1dfd5192a7ba5718f5d27dbe9b1254824efa86407cdfdb537d1745a5cb43ba706faad105eafc36f7c12ce5c5fb3fb6571373dee9feaeee3577f817a875367569cde4d4191e6ab79d0f"}, {0x20, 0x108, 0x0, "5094de1f262614f87e54b2d34aed"}, {0xf0, 0x119, 0xffffffd5, "d889fc84d10e6501a5b8419fab7a66f112bbca403002feb7258a6e3922406a20b5d76e92e67cb570778579bb09c826283dfcc11efaa065ed8f2a371a4b866ca8e859f8dc0462acc146e70b6c2ad8e171db1911ee5e573b5cba71a515e9ba1c959f793a6a7c916425216ad57dd6bd49b6692db2a253c7a043e5296133a532d27f9e73ae686cccf4d33601ae8b19a491c290b99a816fe0fc41ce779cfc8f2e2afd4cee26802fbb5d4a3909e5a050473c090e2e9c4aa711b97a1d721242841efc8bfd31166998ac81494c9f091a250b91480b33156fe930459a3bc22a007e"}], 0x4c0}, 0xc840) 03:36:24 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x10410000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:24 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x20720000000000, 0x0, 0x0) 03:36:24 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x90710000000000, 0x0, 0x0) 03:36:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:24 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x10, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:25 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0xa0510000000000, 0x0, 0x0) 03:36:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe0000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000000)={0x3, {{0x2, 0x4e22, @empty}}}, 0x88) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x40100, 0x0) sendmsg$sock(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="6e90b7ef809e852b5f583ba04363a780c1faa0a756a1c7338c1f04e0249777497e182bed30dc93737bbc11b21e47058d5a8f26e4ad8d5a6724cf42929276d7523297eeb21c71f0e74d2b15b58871808170b203dfa57a513437caae61e97ddd7c9d7f41d80662c2924cdb663f2a0ac2653935315cb6cb0c0bd981c556fa096b9e5937ae44d833213d719328392035773f8f155c05efa58e398fb7bda92bbd6ab2c24125faa25cc962d56b32", 0xab}, {&(0x7f0000000180)="edf5ce1b2c723cc4c05d711997bf93dd8e85172c9bffa7f22cc4fc17e24182135ce143e0237d13c5ac2949cd2dcd040f835455c68df5c78a71", 0x39}], 0x2, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xd0}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xa8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) close(r0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000340)) 03:36:25 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x100000000000000, 0x0, 0x0) 03:36:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r3, 0x8000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:25 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x11000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:25 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x200000000000000, 0x0, 0x0) 03:36:25 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:25 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x3f00000000000000, 0x0, 0x0) 03:36:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:26 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r3, 0x0, {0x7393c8ae96015933}, 0xfe}, 0x18) close(r0) 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x4b00000000000000, 0x0, 0x0) 03:36:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x300000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0xffefffffff7f0000, 0x0, 0x0) 03:36:26 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r5, 0xf, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000140)={0x4, 0x7}) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0xffffffffff600000, 0x0, 0x0) 03:36:26 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:26 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x2) 03:36:26 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = socket(0xa, 0x2, 0x80000000) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x7d, &(0x7f0000000040)={r9}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x80, 0x608, 0x8000, 0xbed, r9}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r10, 0x7fff}, 0x8) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x4) close(r0) 03:36:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:27 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x4b) 03:36:27 executing program 3: ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)=0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x400300) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:27 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x3f00) 03:36:27 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x4000) 03:36:27 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x4b00) 03:36:27 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:27 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x60ff) 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x7700) 03:36:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf0ffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r2 = dup(0xffffffffffffffff) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000480)="88e61f050ffea30bc858587ba780eacec62fd3171856b1ceb261f85aa23ba97990f26f5bd9c012eaac6f6520a63245326b9ebc8934b0a7b3443691ee7c18d72ffc1d88965f44213ec65daab9e8dfb7daccfcb8bd09a640909ebcf27e15df947e4602d4a215fa38b11d526411dfabb2f8afa3bd89db995c27fdbab89e6d2e2da2bb67c26be7aa33ed69213d857530fce63cd7bf351964f30b51e947a06b7dfeb402e63bcfedd864851a3700eda8", 0xad, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000140)="890bb6ff796506000000000000009dd77e46cd0d7ea8c096e0b60651d85361ed017ffcbc98fff34183a6b44d856eca002702684f", 0x34}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x4004050) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0xb700) 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x207200) [ 494.204813][ T27] audit: type=1804 audit(2000000188.669:82): pid=19216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir186249847/syzkaller.R2gl8g/270/file0/file0" dev="sda1" ino=16519 res=1 03:36:28 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x400000) 03:36:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) [ 494.315273][ T27] audit: type=1800 audit(2000000188.669:83): pid=19216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16519 res=0 [ 494.413567][ T27] audit: type=1804 audit(2000000188.699:84): pid=19221 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir186249847/syzkaller.R2gl8g/270/file0/file0" dev="sda1" ino=16519 res=1 03:36:28 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:28 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x51a000) 03:36:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x1000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x719000) [ 494.966251][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000001c0)={r6}) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f00000000c0)={r6, 0x3}) close(r0) [ 495.013992][T19245] FAT-fs (loop0): Filesystem has been set read-only [ 495.054649][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x722000) [ 495.095182][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 495.110778][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="04b0daaddd4cd31bc3940000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x7d, &(0x7f0000000040)={r5}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x34bc}, 0x8) [ 495.166455][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 495.222971][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 495.279861][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 495.290848][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x770000) [ 495.332648][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 495.405428][T19245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:29 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000040)=r7, 0x1) r8 = dup(r3) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'wg2\x00', 0x8000}) 03:36:30 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r0 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r0, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:30 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x907100) 03:36:30 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x2000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setuid(r5) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x800, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1ff}}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other='allow_other'}], [{@euid_lt={'euid<', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x34, 0x34, 0x62, 0x33, 0x38, 0x63, 0x36], 0x2d, [0x3e, 0x30, 0x65, 0x35], 0x2d, [0x31, 0x38, 0x30, 0x34], 0x2d, [0x66, 0x39, 0x64, 0x66], 0x2d, [0x31, 0x33, 0x37, 0x37, 0x38, 0x66, 0x62, 0x65]}}}, {@euid_lt={'euid<', r5}}, {@measure='measure'}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, '/dev/input/mice\x00'}}]}}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x700) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8200) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:30 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0xa05100) 03:36:30 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000080)=0x4) dup(r3) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2000000}, @ipx={0x4, 0x6, 0x80, "e44ef6995208", 0x79}, @ethernet={0x6, @random="09327f7556a9"}, 0xc0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x354a, 0x7, 0x5}) close(r0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f00000000c0)) 03:36:30 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r0 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r0, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 496.016742][T19308] fuse: Unknown parameter 'euid<00000000000000000000' 03:36:30 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:30 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0xb70000) [ 496.231538][T19308] fuse: Unknown parameter 'euid<00000000000000000000' [ 496.311647][ T27] audit: type=1804 audit(2000000190.779:85): pid=19302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir186249847/syzkaller.R2gl8g/272/file0/file0" dev="sda1" ino=17629 res=1 03:36:30 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r0 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r0, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:30 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4d, "e9130f9b96518a417e7b62167c5820551d640788dd139371fa58045cf31bc395735c00f8fb7026ff2e05ac3454a398cca98b181189d96236ff09adc3313286f086ea3fc19c274317ed95c32851"}, &(0x7f0000000080)=0x71) 03:36:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="fa1c0100010000000000000000002f24770e1d9a4589", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:31 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x1000000) 03:36:31 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:31 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x80200200, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x3000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:31 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x84100, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x200000000000, {}, 0xfe}, 0x18) close(r0) 03:36:31 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0xf) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x1000, [0x7, 0x9], 0x1f}, 0x10) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000040)={0xdcc, 0x3, 'client1\x00', 0x1, "347c5228eb21ced0", "91fbb23d1a2f04e3d89f02697a4b323a7aaf364f5c0db491bc86da69f013b2ab", 0x3ff, 0xa5cf}) [ 496.930320][T19347] FAT-fs (loop0): invalid media value (0x89) 03:36:31 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x2000000) [ 497.032466][T19347] FAT-fs (loop0): Can't find a valid FAT filesystem 03:36:31 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 497.254235][T19347] FAT-fs (loop0): invalid media value (0x89) 03:36:31 executing program 3: rmdir(&(0x7f0000000000)='./file0\x00') r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) [ 497.299534][T19347] FAT-fs (loop0): Can't find a valid FAT filesystem [ 497.380126][ T27] audit: type=1804 audit(2000000191.839:86): pid=19358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir186249847/syzkaller.R2gl8g/273/file0/file0" dev="sda1" ino=17628 res=1 03:36:31 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x84) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) init_module(&(0x7f00000001c0)='(&/&\x00', 0x5, &(0x7f0000000240)='userwlan0}$\x00') r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x3}) 03:36:32 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x351091a0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r7) close(r7) 03:36:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x4000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:32 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:32 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:32 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x1, 0x4002c0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180)=0x1, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x220000, 0x0) r6 = accept4(r5, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000100)=0x80, 0x800) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r2, 0x3, {0x0, 0x1, 0x1}, 0xfd}, 0x18) close(r0) 03:36:32 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x3f000000) 03:36:32 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) close(r0) 03:36:32 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x4b000000) [ 498.341590][ T27] audit: type=1804 audit(2000000192.809:87): pid=19412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir186249847/syzkaller.R2gl8g/274/file0/file0" dev="sda1" ino=17615 res=1 03:36:32 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x109202, 0x0) dup(r2) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) close(r0) 03:36:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800000, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = dup3(r3, r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in, @in6=@mcast2}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 498.459491][ T27] audit: type=1804 audit(2000000192.839:88): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir186249847/syzkaller.R2gl8g/274/file0/file0" dev="sda1" ino=17615 res=1 03:36:33 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0xff600000) 03:36:33 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4440, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) close(r0) 03:36:33 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x6000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:33 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x400000000000) [ 499.067869][T19455] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 499.136534][T19455] FAT-fs (loop0): Filesystem has been set read-only 03:36:33 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:33 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x60ffffffffff) 03:36:33 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r6, 0x0, {0x3, 0x0, 0x4}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x0, 0xff, 0x3}, 0xfe}, 0x18) close(r0) r8 = gettid() tkill(r8, 0x33) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, r8}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f0000000180)) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xcf, 0xb8, 0x2, 0x7, 0x0, 0xffff, 0x1008, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x8}, 0xc0, 0xcd5b, 0x0, 0xf, 0x3d4, 0x2, 0x1}, r8, 0xffffffffffffffff, r10, 0x8) 03:36:33 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x109500, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) flistxattr(r3, &(0x7f00000000c0)=""/148, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) close(r0) 03:36:33 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x770000000000) 03:36:34 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x7fffffffefff) [ 502.710773][ T249] tipc: TX() has been purged, node left! [ 505.276660][T19538] IPVS: ftp: loaded support on port[0] = 21 [ 505.578776][T19538] chnl_net:caif_netlink_parms(): no params data found [ 505.705577][T19538] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.719110][T19538] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.728118][T19538] device bridge_slave_0 entered promiscuous mode [ 505.744899][T19538] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.752702][T19538] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.761406][T19538] device bridge_slave_1 entered promiscuous mode [ 505.938010][T19538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.958383][T19538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.003679][T19538] team0: Port device team_slave_0 added [ 506.015267][T19538] team0: Port device team_slave_1 added [ 506.058825][T19538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.065991][T19538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.098729][T19538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.113433][T19538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.120423][T19538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.151835][T19538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.364569][T19538] device hsr_slave_0 entered promiscuous mode [ 506.417798][T19538] device hsr_slave_1 entered promiscuous mode [ 506.460667][T19538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.468265][T19538] Cannot create hsr debugfs directory [ 507.058777][T19538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.077448][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 507.086354][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 507.099257][T19538] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.120783][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 507.129617][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 507.140276][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.147416][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.171046][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 507.179192][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 507.189339][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.203354][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.210464][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.227088][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 507.267686][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.278522][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.311828][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.327026][ T249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.335272][ T249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.345154][ T249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.353977][ T249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.365933][ T249] device bridge_slave_1 left promiscuous mode [ 507.374790][ T249] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.437475][ T249] device bridge_slave_0 left promiscuous mode [ 507.449980][ T249] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.511892][ T249] device veth1_macvtap left promiscuous mode [ 507.518558][ T249] device veth0_macvtap left promiscuous mode [ 507.541615][ T249] device veth1_vlan left promiscuous mode [ 507.548395][ T249] device veth0_vlan left promiscuous mode [ 514.251901][ T249] device hsr_slave_0 left promiscuous mode [ 514.300811][ T249] device hsr_slave_1 left promiscuous mode [ 514.379000][ T249] team0 (unregistering): Port device team_slave_1 removed [ 514.395758][ T249] team0 (unregistering): Port device team_slave_0 removed [ 514.412525][ T249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.466924][ T249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.689826][ T249] bond0 (unregistering): Released all slaves [ 514.925971][ T2857] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.950861][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.959880][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.969846][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 514.978818][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.996451][T19538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.008208][T19538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.018924][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.028801][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.057158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.073063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.089324][T19538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.184167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.194096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.241216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.249652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.264480][T19538] device veth0_vlan entered promiscuous mode [ 515.277915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.287203][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.303593][T19538] device veth1_vlan entered promiscuous mode [ 515.334503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 515.345300][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 515.354004][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.364507][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.377022][T19538] device veth0_macvtap entered promiscuous mode [ 515.394045][T19538] device veth1_macvtap entered promiscuous mode [ 515.419011][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 515.434734][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.445100][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 515.456058][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.466402][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 515.477569][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.487842][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 515.499990][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.510401][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 515.521891][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.535124][T19538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.544574][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 515.558411][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.567830][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.576989][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.589175][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 515.608474][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.619118][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 515.636451][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.646678][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 515.664744][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.677825][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 515.698992][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.709289][T19538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 515.728020][T19538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.740065][T19538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.755266][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.765550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.262548][ T27] audit: type=1804 audit(2000000210.729:89): pid=19551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/0/file0/file0" dev="loop0" ino=201 res=1 03:36:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./bus\x00', 0x0, 0x8}, 0x10) [ 516.307784][T19556] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 516.317359][T19556] FAT-fs (loop0): Filesystem has been set read-only 03:36:50 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0xb70000000000) 03:36:50 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000000)=@default) close(r0) 03:36:50 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xa000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xf0ffffff, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:50 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x20720000000000) 03:36:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000e40)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) close(r2) 03:36:51 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x90710000000000) [ 516.841207][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 516.849967][T19585] FAT-fs (loop0): Filesystem has been set read-only 03:36:51 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) getsockopt$inet6_buf(r3, 0x29, 0x2d, &(0x7f0000000000)=""/212, &(0x7f0000000100)=0xd4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r0) [ 516.950174][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:51 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0xa0510000000000) [ 516.993600][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.040120][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.062060][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.089748][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:51 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 517.146977][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.183835][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.270158][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.304875][T19585] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:51 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x100000000000000) 03:36:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xc000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:51 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000000)={0xfff, 0x0, 0x6, 0x300}) close(r0) 03:36:51 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:52 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x200000000000000) 03:36:52 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa705) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x7d, &(0x7f0000000040)={r7}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r7, 0x9, 0x2, 0xcd31, 0x3, 0x2}, 0x14) 03:36:52 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r5) r6 = pidfd_getfd(r4, r5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x5, 0x6}, @window={0x3, 0x9, 0xfe}, @window={0x3, 0x30, 0x798}, @mss, @mss={0x2, 0x73}, @sack_perm], 0x6) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) sendto$inet(r9, &(0x7f00000000c0)="09d1717aa3a786b650d58342ba5daec47810965e2a65f97136c80c9a953288acb06e70590fbee4d4d064f352c99089943c34dea5dc53cf735afda63e6bbfefb99fa16dd56c2a289e2a5c4978625f60b5530d37a82e8da021f7f0fabc11c5156074f8690c9f96a259a3e46e638ea5362eaa67c7db863ff11ce08f2dda85edf9aa300f22aca0a6aa1473cc8625ea43b3", 0x8f, 0xc000, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x20) close(r0) [ 517.881699][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.907582][T19627] FAT-fs (loop0): Filesystem has been set read-only [ 517.927710][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.951485][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 517.973312][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 518.025536][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:52 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x3f00000000000000) [ 518.069833][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:52 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 518.122099][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 518.182607][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="bb42fcb1042a0e7ca77ca9f35ca2e59406497ba7", 0x14}, {&(0x7f0000000080)="067f19e5b9c40dee7438", 0xa}, {&(0x7f00000000c0)="11b3680b2b7553d5626b49208b80ec7afd591c77bd9fb608e925ea30f1062c92f3f1e425f8a45bcf4c13fa31f77e3705083e464f6bc41f2ca485f78e8381705792de7c41f2cf22ad829fe25ae83ccc37fb142de262fb0d5cdc454321d736bd20dbeaf68624dad20790ed0eee7b14a26e8792e30436449f7f", 0x78}, {&(0x7f0000000140)="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", 0xfc}, {&(0x7f0000000240)="dd6457a37b6fd84f236628645ae1c52911c93a80000de201c409dc78a1d702a843d1dbfc3c2b5cf694f15ba9e2c1fbe743450fcf230ef5", 0x37}], 0x5, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr, @remote}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x31, [@local, @rand_addr=0x9, @local, @multicast1, @rand_addr=0xff, @multicast2, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @local]}, @ssrr={0x89, 0x7, 0x5e, [@empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xe9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @remote, @rand_addr=0xfffffff8, @multicast2]}, @rr={0x7, 0xf, 0xa2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @noop, @generic={0x94, 0xc, "72bfab2b12c18d2af82c"}, @ssrr={0x89, 0x1f, 0x26, [@multicast1, @multicast2, @remote, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1]}, @ssrr={0x89, 0x13, 0x16, [@loopback, @multicast1, @remote, @loopback]}]}}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x62, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback]}, @rr={0x7, 0x13, 0x3a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x42}, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x4c, 0x3, 0x9, [{@broadcast, 0x3f}, {@rand_addr=0x80, 0x7ff}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x40}, {@local, 0x1}, {@loopback, 0x5}]}, @timestamp_prespec={0x44, 0x4c, 0xa4, 0x3, 0x2, [{@local, 0xbba}, {@rand_addr=0x101, 0x32}, {@remote, 0x1}, {@local, 0x20}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@remote}, {@remote, 0x97}, {@remote, 0x7f}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xb, 0x1, [{0x1, 0x5, "ed7dbc"}]}, @timestamp_addr={0x44, 0x2c, 0xe6, 0x1, 0x6, [{@loopback, 0x9a9}, {@rand_addr=0x43}, {@multicast2, 0x7fffffff}, {@loopback, 0x5}, {@multicast2, 0x5ec0}]}, @generic={0x86, 0x4, "e0b4"}, @ra={0x94, 0x4}]}}}], 0x218}}, {{&(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="c8077be5a3038b7656b16692978d1c408acf37f518b303ad14f81ad534f3e6fc7874c70a5dc5af4ee63f300c09ac7bcf5146dcf7e180103479a554c6716d8c9425d30ade064d3a0b7516064464f7518a7fabbd6c", 0x54}], 0x1, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x30}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="32603e3504cd83c9160264c9745bb85ccb23b6b9ac2a413858cb1116fc9e94ab33c94b642cefe5fa52521dea4b7529e631f65689d2f218f26e25f8064f1c86d1bcde995d56f7108d6336598040ab5e42483d6c13ea5873df97708ee257ef3b4b59ecc45f360e486de2957c80d76688d71aad78c9655aaf00837f3ff00cf3aef308e0054a20292146f6c551b1c01f6e209fbbf8be36feed467388c3c13cf5595bec07cea47d679fe29a5dacb5304b20b4c8b9d6967661058cee2ddf7e47d1ec0f375de93ac6752afc6aae0636c976cc656325a7fe726d7ab11e074bdd42cdd78a948f3144982233548c", 0xe9}], 0x1, &(0x7f0000000800)=[@ip_retopts={{0xbc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0x5a, 0x3, 0xa, [{@loopback, 0x6}, {@multicast2, 0xa4d}, {@local, 0x101}, {@rand_addr=0xfff, 0x1}, {@empty, 0x1000}, {@empty, 0xfff}, {@local, 0x4}, {@empty, 0x27df}, {@broadcast, 0x8}]}, @generic={0x88, 0xa, "541f9bebf2dfc266"}, @lsrr={0x83, 0x7, 0x5a, [@loopback]}, @ssrr={0x89, 0xf, 0x71, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}]}, @cipso={0x86, 0x26, 0x3, [{0x6, 0xb, "fca985205d8389323e"}, {0x0, 0x8, "75d2484469cf"}, {0x2, 0x3, 'W'}, {0x1, 0x2}, {0x6, 0x8, "808c7b3ac38f"}]}, @end, @ra={0x94, 0x4}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0x4, "96f9"}, {0x5, 0xa, "83b1064bf39342be"}]}]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x74, 0x3, 0xf, [{@multicast2, 0x10000}]}, @timestamp={0x44, 0x24, 0xf, 0x0, 0x1, [0x1, 0x2, 0x7c, 0x4, 0x0, 0xb7, 0x10000, 0x5]}, @timestamp_addr={0x44, 0x4, 0xa1, 0x1, 0x4}, @lsrr={0x83, 0x3, 0x43}, @lsrr={0x83, 0xf, 0x93, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}]}, @generic={0x89, 0x4, "1f83"}, @timestamp={0x44, 0x14, 0xbc, 0x0, 0x5, [0x200, 0x1, 0x3, 0x71d]}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x10, "541926c1a2518ee6f4fa4944b580"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x52, 0x3, 0x6, [{@broadcast, 0x80000000}, {@multicast1, 0x3}, {@rand_addr=0xfffff2a9, 0x69a}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xbd}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x51, [@remote]}]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x13, 0x0, 0x1, [0x80, 0x3, 0xf6f3, 0xff, 0x9, 0x9]}, @timestamp_prespec={0x44, 0x14, 0x28, 0x3, 0x0, [{@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x39, 0x1, [{0x7, 0xc, "74174d611374ec648b9e"}, {0x0, 0x2}, {0x1, 0x11, "bf51b150962656140209f9209bfd58"}, {0x5, 0x5, "00f69a"}, {0x1, 0x5, "70699d"}, {0x0, 0xa, "1dbe45ce5b621a6e"}]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xf1, 0x0, 0x6, [0x1]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x280}}], 0x3, 0x8000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000b40)=0xbfa) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000e40)={0x1d, r10, 0x0, {}, 0xfe}, 0x18) close(r6) [ 518.233932][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 518.290169][T19627] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x4, 0x50bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) ftruncate(r2, 0x8200) r5 = socket$isdn(0x22, 0x3, 0x2) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f00000002c0)={0x0, 0x8001, 0x7ff, 0x8}) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:52 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x4b00000000000000) 03:36:52 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xf9fdffff, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:53 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0xffefffffff7f0000) 03:36:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x3, {}, 0xfd}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000240)) r7 = dup(r5) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$FBIOGET_VSCREENINFO(r7, 0x4600, &(0x7f0000000180)) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000140)={0x25, 0xb1b, &(0x7f0000000000)="a056697f47dbb5e1282fc117e1297eb65a9d21768862110be1011722ef436c786c7b615ed5e016a140b528398791a62de622d28d967814ddf96c8272ea6ca59ad1e076179962c1c9c7fbaf57d0308e", &(0x7f0000000080)="67035b52fb04fe5e3143fdf789c5b4d54f0efe23dde394bd244a75ba5aa6273af6d64268ca14203a0f1aabf0246f512d03d1a25bec2cdf702d64fb9b41386c0b8ed87a721ff02471b52264da8d51924727e7a0307d762a6aedb077ccd8ad4809aa01b2188327d3263c545bbb9d39e0a4d5d1b96e99ab81cad0e66d8786799a98f88a", 0x4f, 0x82}) close(r0) 03:36:53 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0xffffffffff600000) 03:36:53 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 519.038840][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 519.143427][T19684] FAT-fs (loop0): Filesystem has been set read-only [ 519.165771][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) 03:36:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 519.210935][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 519.244329][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:53 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x6a) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, r3, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x13}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008006}, 0x2000c000) r5 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r5, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 519.300395][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 519.354674][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:53 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) rt_sigpending(&(0x7f0000000000), 0x8) close(r0) [ 519.416457][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 519.444647][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:54 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfcfdffff, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 519.476808][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 519.513481][T19684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) getpeername$unix(r3, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x4000000000000001, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0xa000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) dup(r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) close(r0) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r5) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x101000, 0x0) keyctl$link(0x8, r7, r8) 03:36:54 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 520.140385][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 520.165484][T19737] FAT-fs (loop0): Filesystem has been set read-only 03:36:54 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000140)) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x0, 0xff}, 0x2}, 0x18) r6 = dup(r3) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000080)={0x9b0000, 0x8001, 0x5, r7, 0x0, &(0x7f0000000040)={0x980926, 0x8, [], @p_u32}}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) ioctl$FIONREAD(r11, 0x541b, &(0x7f00000024c0)) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000200)={0x0, 0x7, [{0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0x0, 0x10000}, {r7, 0x0, 0x2000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0xfffff000}, {r8, 0x0, 0x1000000000000}, {r11, 0x0, 0x4000, 0x1000}, {r9, 0x0, 0x2000, 0x10000}]}) setsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, &(0x7f00000000c0)=0x4, 0x4) close(r0) 03:36:54 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) r3 = accept4(r2, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}}}, 0x24}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in6=@dev={0xfe, 0x80, [], 0x37}, 0x4e24, 0x0, 0x4e20, 0x3, 0xa, 0xa0, 0x80, 0x1, r6, r8}, {0x8, 0x2, 0x5, 0x5, 0x7, 0x80000000000000, 0x5, 0x5}, {0x99c, 0x100000001, 0x4, 0x3ff}, 0x2, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@broadcast, 0x4d5, 0x33}, 0xa, @in6=@rand_addr="4a162f8e3bef6a20ddf59359a0f030c2", 0x3504, 0x3, 0x0, 0xbe, 0x8, 0x101, 0x6fc9}}, 0xe8) [ 520.202915][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x10000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 520.277204][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 520.341760][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 520.404106][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 520.436519][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 520.477394][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:55 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80080, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'veth0_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r2 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r2, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:36:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet(0x2, 0x2, 0x81) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @empty}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', r1}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) close(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$IMCLEAR_L2(r7, 0x80044946, &(0x7f0000000280)=0x2) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x408080, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000240)) [ 520.523472][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfdfdffff, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 520.624319][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 520.716425][T19737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:36:55 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @local, 0x9}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:36:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040)) close(r0) 03:36:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000240)='./bus\x00', 0x103) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x325043, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = gettid() tkill(r3, 0x33) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1, r3}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0xf8, 0x2, 0x1, 0x1f, 0x0, 0x4, 0x4000, 0x8dc2bff33abb349e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x901, 0x8, 0x401, 0x5, 0x3, 0x400, 0x3}, r3, 0xc, r5, 0xa) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:55 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0xd0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000003c0)=0x3, 0x4) r4 = semget(0x1, 0x2, 0x100) semctl$SEM_STAT_ANY(r4, 0x1, 0x14, &(0x7f0000000e80)=""/4096) 03:36:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x14000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x0, 0x1, 0x1}, 0xff}, 0x18) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x8080, 0x0) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='(vboxnet0\x00'}, 0x10) dup(r6) sendmsg$sock(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x2, 0x2, {0xa, 0x4e23, 0x8001, @local, 0x6}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000080)="f28094d763fb55daaa6a8fce2c84f4a2f85683a37302c5b5c697290793d9a2d25007b46616d3ffcb84707d4add90cbfda6445ff6a6263a85256f40e04b2782ea", 0x40}, {&(0x7f00000000c0)="fc344d814797d39fd4f73be5d4c86e4807354591b75f1102b5391410d8974cca144a382f616635e730f6e53d9d86c277ecc20fd912a4487d972e4f6d8748218150c9", 0x42}, {&(0x7f0000000140)="68440d640f5299d1fc12173922cff5b9c2d490e256019843e61614d2bb6266f8c49d070e3ea3a44d19202a0306d2eb6de6844d6d9acad147403442acaff018fd42f7d3bff18d18a8584125c5269f32a8b19651eebcf264b78f9859e6e49d3efd8714e1bfb78bdc6a3276d5f85979de12efb35d7bc9f92db922daf75d448e69cfc9387a05967258ac8209170a56d10ef94857a8310a6ce9295c3a1d031f5ddbe7c6747f253780ca9c2829c077a96b8c9f61b36cb971466dbf6e5865cff671af3ca31e327fafa0ed611cc22a26c5d41e93b5ccc0b861216a05049f3b26abb19a3fffadcf15", 0xe4}], 0x4, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}], 0x18}, 0x4050) 03:36:56 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x98, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', r5}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfeffffff, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:56 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @rand_addr, 0x4}, 0x1c) r1 = socket$inet(0x2, 0x4, 0x1000) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 521.823045][ T27] audit: type=1804 audit(2000000216.289:90): pid=19807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/6/file0/file0" dev="loop0" ino=216 res=1 03:36:56 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 521.978306][ T27] audit: type=1804 audit(2000000216.319:91): pid=19814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/6/file0/file0" dev="loop0" ino=216 res=1 03:36:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x3f000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:56 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x98, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', r5}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = getgid() r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x8003, 0x8020001) getresuid(&(0x7f0000001bc0)=0x0, &(0x7f0000001c00), &(0x7f0000001c40)) fstat(r3, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000004c0)="8f07709996cbf80e5e88aa31cf9719728fe5332f47ca662c85685864b9476c884beed4c79ff74b47b9223cc39d26ac00171383790108f402fd91bb60260bd5b680eb40c10b6055f31a4d88f47f817d0c59f4ea31ccf114b1a9c98748378fa345a481cae9230bb707bfe202b16e092fcc63be9a0a35c319d1fc5c0ec791b994432d1c", 0x82}, {&(0x7f0000001580)="4482fd863a80be2dc974c8ce15242062d6d6c74d7210fe6a512a605cd900563141182a853f57cea80014bd98bd5433d540d997cba586f57295674bede6d9d65fa842d809df0d52f68bd938b7b11117c2a22bbd882649c80b1ebc0831e4cb2671e8bd2661c55e6bcc93ff4d0a459065a7d2ada2c4c79c29d3c6e19536d461eb1b1c8baa2c708e159aba2f086833c3a457a6781e29d7baa9541f7fb82d884da0c87b66123850835b5a5ca958bc9bd0dfbfea81763c068ffd29f2", 0xb9}, {&(0x7f0000001640)="492985887ae18e68b5a55c71a9511b817824b3dae574645e1b79db40b1bb37a3ff03f82d59bac54e869f895d2fd92625c104b55ba3cd5cd42c64fb4d437dc8ca1a2199da8727b3a956e679f52f56dbeac362d78f6d833d25fa35c1e8400e", 0x5e}, {&(0x7f00000016c0)="7092f52985ea07bf2af866f64ac303118035b4781f842c1100b3a31846d7c5246d44f00800dadf3fe958916e3bd97702817830ed7370376420d3a9affe140981615870e3be36c7c87a497742017fbfd2172b08e4291a5e2e0706afb32c1226e952014d871d148955aec86660a35d1ba2dd7989cc4d49870eece033403ee4b5112d805e11c3c4d26ef3488d4b2b20f81de31c723a8b62af69b57e", 0x9a}, {&(0x7f0000000240)="431cc1386e1e952eb2934ed097ee66eac96924b3c1122907", 0x18}, {&(0x7f00000002c0)="a81dadeec5b850fd14c60920725210fb6556", 0x12}, {&(0x7f0000001780)="23159bd719e313cf61bb30751b969df524b8cba9bb0c32a47cb3cd4134f8e5687410df8b7f4f08bdc2cc161c8645b4cd69cff506fbef69cfa2a73d6897dad4d433abc626e1f8ce50e48ca92367fe1ff879eef8fa1d0b6692bfe16c8c0fa6db498ea7c6dec7275150e8c2e3989c365102d8aa71069ef577bbef7ba9c4bbadc6d6952eb0bc55016c4f6fbb0ca94d6da6aced8bb02701233d3b5afd3b8d65c9d8fa69c3f0b2da9cb09e76d4841cab8f006d03ea718974aa4d6c58acc7408ceefba2932831bf66889a0a1d", 0xc9}, {&(0x7f0000001880)="7fce378ec5358e20f8ca1885100a19f578bc9ac33a5797f550d806b2cd88c477b48a92e58ac5fa63ad632868bb01da48bfa4783b7f8b0210af6f7b028654d34a6b51ac907c658199b82cd36482909d0fc2a9ff9d3f0e1a27ab80bc658878d8f7e960a1699950cdd6a8461ffbf043ac07b883c472c263d01bcdcaf0eabb3162f5f56d0e33eed98b4fb4cad9bcffff51c182d0085c7c3742069c53a7217a41ab29d676705d8e9e4d5a7a2060c75e63469369f01ec35ebe008eef2df454e98d5a1e58cbbeb39bc3152c65b56506", 0xcc}], 0x8, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x80, 0x8010}, 0x40001) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {}, {0x2, 0x5}], {0x4, 0x1}, [{0x8, 0x5}, {0x8, 0x2}, {}, {0x8, 0x5}, {0x8, 0x2, 0xee00}, {0x8, 0x7}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x0, r2}, {0x8, 0x5, r5}], {0x10, 0x3}}, 0x94, 0x2) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8200) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:57 executing program 3: rmdir(&(0x7f0000000000)='./file0\x00') r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) close(r0) 03:36:57 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = dup(0xffffffffffffffff) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) write$P9_RMKNOD(r3, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x40, 0x1, 0x3}}, 0x14) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) getsockopt$inet_udp_int(r7, 0x11, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r5, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x18, r9, 0x1, 0x0, 0x0, {0x12}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa8, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x24000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xedeb}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7b0b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) bind$can_j1939(r0, &(0x7f0000000e40)={0x1d, r2, 0x0, {0x1}, 0xff}, 0x18) close(r0) 03:36:57 executing program 3 (fault-call:5 fault-nth:0): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:36:57 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xff000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:57 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @rand_addr="000000000000000000000200"}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/73) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:36:57 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0), 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 523.119126][T19859] FAULT_INJECTION: forcing a failure. [ 523.119126][T19859] name failslab, interval 1, probability 0, space 0, times 0 [ 523.161266][T19859] CPU: 1 PID: 19859 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 523.171291][T19859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.181387][T19859] Call Trace: [ 523.184836][T19859] dump_stack+0x188/0x20d [ 523.189199][T19859] should_fail.cold+0x5/0x14 [ 523.193832][T19859] ? lock_downgrade+0x7f0/0x7f0 [ 523.198701][T19859] ? setup_fault_attr+0x1e0/0x1e0 [ 523.203762][T19859] should_failslab+0x5/0xf [ 523.208197][T19859] kmem_cache_alloc+0x29b/0x730 [ 523.213178][T19859] ? __might_fault+0x190/0x1d0 [ 523.217958][T19859] ? _copy_from_user+0x123/0x190 [ 523.223019][T19859] io_submit_one+0x10e/0x2eb0 [ 523.227735][T19859] ? lookup_ioctx+0x1c0/0x780 [ 523.232488][T19859] ? aio_poll_complete_work+0xfa0/0xfa0 [ 523.238195][T19859] ? __might_fault+0x11f/0x1d0 [ 523.243002][T19859] ? __might_fault+0xef/0x1d0 [ 523.247729][T19859] ? __x64_sys_io_submit+0x1bd/0x540 [ 523.253102][T19859] __x64_sys_io_submit+0x1bd/0x540 [ 523.255078][ T27] audit: type=1804 audit(2000000217.719:92): pid=19851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/7/file0/file0" dev="loop0" ino=219 res=1 [ 523.258233][T19859] ? __ia32_sys_io_destroy+0x3d0/0x3d0 [ 523.288229][T19859] ? fput_many+0x2f/0x1a0 [ 523.292582][T19859] ? ksys_write+0x19f/0x250 [ 523.297249][T19859] ? __ia32_sys_read+0xb0/0xb0 [ 523.302030][T19859] ? __ia32_sys_clock_settime+0x260/0x260 [ 523.307881][T19859] ? trace_hardirqs_off_caller+0x55/0x230 [ 523.313639][T19859] ? do_syscall_64+0xf6/0x790 [ 523.318337][T19859] do_syscall_64+0xf6/0x790 [ 523.323294][T19859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 523.329302][T19859] RIP: 0033:0x45c849 [ 523.333342][T19859] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 523.352956][T19859] RSP: 002b:00007fbc81cd0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 523.361602][T19859] RAX: ffffffffffffffda RBX: 00007fbc81cd16d4 RCX: 000000000045c849 03:36:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x40000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 523.369586][T19859] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007fbc81c94000 [ 523.377656][T19859] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 523.385703][T19859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 523.393711][T19859] R13: 00000000000001f9 R14: 00000000004c422b R15: 0000000000000000 [ 523.440202][T19841] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 523.473291][T19841] FAT-fs (loop0): Filesystem has been set read-only 03:36:58 executing program 3 (fault-call:5 fault-nth:1): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 523.553901][T19872] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 03:36:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1a}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4081) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$PPPIOCDISCONN(r3, 0x7439) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 523.682934][T19879] FAULT_INJECTION: forcing a failure. [ 523.682934][T19879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.696199][T19879] CPU: 0 PID: 19879 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 523.706222][T19879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.716346][T19879] Call Trace: [ 523.719656][T19879] dump_stack+0x188/0x20d [ 523.724016][T19879] should_fail.cold+0x5/0x14 [ 523.728633][T19879] ? setup_fault_attr+0x1e0/0x1e0 [ 523.733681][T19879] ? __lock_acquire+0x18c3/0x5270 [ 523.738738][T19879] __alloc_pages_nodemask+0x17a/0x820 [ 523.744139][T19879] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 523.749881][T19879] ? find_held_lock+0x2d/0x110 [ 523.754675][T19879] ? lock_downgrade+0x7f0/0x7f0 [ 523.759550][T19879] cache_grow_begin+0x8c/0xc10 [ 523.764335][T19879] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 523.769847][T19879] kmem_cache_alloc+0x66a/0x730 [ 523.774730][T19879] ? _copy_from_user+0x123/0x190 [ 523.779696][T19879] io_submit_one+0x10e/0x2eb0 [ 523.784399][T19879] ? lookup_ioctx+0x1c0/0x780 [ 523.789110][T19879] ? aio_poll_complete_work+0xfa0/0xfa0 [ 523.794674][T19879] ? __might_fault+0x11f/0x1d0 [ 523.799555][T19879] ? __might_fault+0xef/0x1d0 [ 523.804287][T19879] ? __x64_sys_io_submit+0x1bd/0x540 [ 523.809589][T19879] __x64_sys_io_submit+0x1bd/0x540 [ 523.814724][T19879] ? __ia32_sys_io_destroy+0x3d0/0x3d0 [ 523.820208][T19879] ? fput_many+0x2f/0x1a0 [ 523.824560][T19879] ? ksys_write+0x19f/0x250 [ 523.829090][T19879] ? __ia32_sys_read+0xb0/0xb0 [ 523.833867][T19879] ? __ia32_sys_clock_settime+0x260/0x260 [ 523.839603][T19879] ? trace_hardirqs_off_caller+0x55/0x230 [ 523.845361][T19879] ? do_syscall_64+0xf6/0x790 [ 523.850053][T19879] do_syscall_64+0xf6/0x790 [ 523.854581][T19879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 523.861710][T19879] RIP: 0033:0x45c849 [ 523.865621][T19879] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 523.885236][T19879] RSP: 002b:00007fbc81cd0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 523.893748][T19879] RAX: ffffffffffffffda RBX: 00007fbc81cd16d4 RCX: 000000000045c849 [ 523.901734][T19879] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007fbc81c94000 [ 523.909984][T19879] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 523.917972][T19879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 523.925955][T19879] R13: 00000000000001f9 R14: 00000000004c422b R15: 0000000000000001 03:36:58 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xff030000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:58 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x8a) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "65cc9d78f1fefff831e100f61865ef11"}, 0x11, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) sendto$inet(r2, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:36:58 executing program 3 (fault-call:5 fault-nth:2): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:36:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0), 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x4f030000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:36:58 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:36:58 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 524.537739][T19892] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 524.556614][T19892] FAT-fs (loop0): Filesystem has been set read-only 03:36:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x4, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:36:59 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="1b459b4279c706d0eb0b5f313f623f25b5926d9b3cc6768e632bc6d7ccfa9039e178fa67c8d5eebd23bf70732ca8355f0d14f3802013fc68b1f56d21284523078a0be4521eb4c03146b776aafa907a67aafa7b4610510c88ff26da03d6f3fd033172d25ca4568fabf966fa0a91a2e52f5fffc8ec330f36494f75772edc6346c6358f3f4e4bbc0888a0a42e25fdccf09503f8498f5f2b4e1f0dee81335ec89e9edd451db1f00a77664f0ebe14c9055f7db8b2a5e927c522d6ffdcab1a39497eb85d72044ab6c99bf9f9d4c08bb806276a21d52cc53a3bfd1a6d16a77145a2df8a22adcaf27eb020203b32908eaf3b64", 0xef}, {&(0x7f00000000c0)="42a54bf0a5455553d793", 0xa}, {&(0x7f0000000300)="1ece9af2ff3571d488acdccba22fa371d071aa4d5ff16c9346086283bf42ab148e95b5ef000b4fa2903fc0a1b670946e20845d774db3c13e9da49f7e064aaf0cdc5e7526dce503052bb12589137002797e3697b3ffb9603ef34f9f897029c941a09e853f3b85d4fca0a925ef63d794409944930dc9d60c81efed6d6694fda71701caf64ad0409266bbe1d6a1b98891ff44aa0be367eb1cbef6fbd84737b0a5340d724e56fd6303fc551b8a7a9a11934bb0abcb4b2040378f8b055661cb44d8eb8641642c768ec4c46e840c9822c99431ed6010a9bb53f147bf", 0xd9}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000180100001f000900d20a20a934beb9741000000000000000db00000050000000000000000e010000800000003ea41e4e2e6fc836a335d6b9ee441996c7bf8ab31076a05a76ec921c9ac8852174cd3a45a0d5f194c3d1da3bb9df7f63acf8eb1cac4d04ad718342c82b0cde08ed94ce2ad2938516833e42bb4f1325207b01fb625dcb9ec4c9a4af5ee1923c33062415"], 0x78}, 0x4) 03:36:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/13) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000180)={0x0, 0x80, 0x80}) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:36:59 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) socket$inet(0x2, 0x2, 0x2200000088) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:36:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:36:59 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xffff1f00, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:36:59 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0), 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:36:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:36:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x60000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 525.261345][T19933] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 525.322324][T19933] FAT-fs (loop0): Filesystem has been set read-only 03:36:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:36:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:00 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000064000000620cd06ee441ab745654d224ad59680843500b2683295de1a631cedc5b6c0fc23a1a4f398777ee809316392170b8e012909c80166c169d0a7b4b19575677b6f9ec7a546a3171095cb632e1a699cf6c7acca0040fee7d00"/136], &(0x7f00000000c0)=0x88) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) pipe2(&(0x7f0000000240), 0x4800) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) r6 = socket(0xa, 0x1, 0x3) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000f1551559ed20b7f352b2687826a5677e071e642fff21874eca67fb41e4d930d971748c758bd4f013a86692", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x7d, &(0x7f0000000040)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x204, 0x5, 0x401, r8}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000400)={r9, 0xac, &(0x7f0000000300)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x102, @rand_addr=0x7fff}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x14fd0e56, @mcast2, 0x3}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000440)=0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000045}, 0x200040c4) [ 525.958656][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 526.028518][T19970] FAT-fs (loop0): Filesystem has been set read-only [ 526.050863][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 526.072159][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 526.107022][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 526.144764][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfffffdf9, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 526.177159][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x65580000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 526.283864][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 526.339090][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 526.386266][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 526.427544][T19970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x4010, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/209, 0xd1}], 0x6, &(0x7f0000000840)=""/211, 0xd3}, 0x2000) r3 = creat(&(0x7f0000000940)='./file1\x00', 0x8c) pivot_root(&(0x7f0000000380)='./file1\x00', &(0x7f0000000400)='./file0\x00') fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:01 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x300, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:01 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x2, @empty}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x200, 0x4) 03:37:01 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x500, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 527.096895][ T27] audit: type=1804 audit(2000000221.559:93): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/11/file0/file0" dev="loop0" ino=231 res=1 03:37:01 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x81000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0)=0x7fff, &(0x7f0000000240)=0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x13}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pipe(&(0x7f0000000140)) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x9}, 0x8) 03:37:01 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x700, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:02 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x4000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:02 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x60ff, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 527.863942][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 527.919891][T20047] FAT-fs (loop0): Filesystem has been set read-only [ 527.937667][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 527.980737][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 528.005267][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:02 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x7700, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 528.052455][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 528.070876][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:02 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x2ecd, @empty}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 528.098107][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:02 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 528.150873][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x88a8ffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 528.214787][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 528.241276][T20047] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:02 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0xb700, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0xa4cda000) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:03 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfffffdfd, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x207200, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 528.975318][ T27] audit: type=1804 audit(2000000223.439:94): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/13/file0/file0" dev="loop0" ino=237 res=1 [ 528.986699][T20097] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 03:37:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 529.050959][T20097] FAT-fs (loop0): Filesystem has been set read-only 03:37:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000140)=[0x0, 0x3], 0x2) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:03 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:03 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0x8) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x9effffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:03 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x51a000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 529.418443][T20114] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:37:04 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x6) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x7, 0x101, 0x2}) 03:37:04 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(0xffffffffffffffff) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) socket$inet6(0xa, 0x800, 0x8001) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0xcc, 0x7f}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000040)=0x7fffffff, 0x4) r4 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r4, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x4) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="008000000000d58c"]) 03:37:04 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:04 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) sendto$inet6(r3, &(0x7f0000000040)="13cd4b303de7171315bc041b2ce6cdb655c269d33da6adf975a25d7ce6112c38e33b349f2acc07fa0640e77d4a4f2c", 0x2f, 0x4044044, &(0x7f0000000080)={0xa, 0x4e21, 0x78, @remote, 0x7fffffff}, 0x1c) 03:37:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x719000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 529.829840][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 529.870711][T20133] FAT-fs (loop0): Filesystem has been set read-only [ 529.914550][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 529.975049][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x722000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 530.030766][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 530.063268][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 530.120847][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe40d0000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 530.165038][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 530.200814][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 530.242553][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 530.315839][T20133] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:04 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:04 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x770000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:05 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) getresuid(&(0x7f0000001bc0)=0x0, &(0x7f0000001c00), &(0x7f0000001c40)=0x0) fstat(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000004c0)="8f07709996cbf80e5e88aa31cf9719728fe5332f47ca662c85685864b9476c884beed4c79ff74b47b9223cc39d26ac00171383790108f402fd91bb60260bd5b680eb40c10b6055f31a4d88f47f817d0c59f4ea31ccf114b1a9c98748378fa345a481cae9230bb707bfe202b16e092fcc63be9a0a35c319d1fc5c0ec791b994432d1c", 0x82}, {&(0x7f0000001580)="4482fd863a80be2dc974c8ce15242062d6d6c74d7210fe6a512a605cd900563141182a853f57cea80014bd98bd5433d540d997cba586f57295674bede6d9d65fa842d809df0d52f68bd938b7b11117c2a22bbd882649c80b1ebc0831e4cb2671e8bd2661c55e6bcc93ff4d0a459065a7d2ada2c4c79c29d3c6e19536d461eb1b1c8baa2c708e159aba2f086833c3a457a6781e29d7baa9541f7fb82d884da0c87b66123850835b5a5ca958bc9bd0dfbfea81763c068ffd29f2", 0xb9}, {&(0x7f0000001640)="492985887ae18e68b5a55c71a9511b817824b3dae574645e1b79db40b1bb37a3ff03f82d59bac54e869f895d2fd92625c104b55ba3cd5cd42c64fb4d437dc8ca1a2199da8727b3a956e679f52f56dbeac362d78f6d833d25fa35c1e8400e", 0x5e}, {&(0x7f00000016c0)="7092f52985ea07bf2af866f64ac303118035b4781f842c1100b3a31846d7c5246d44f00800dadf3fe958916e3bd97702817830ed7370376420d3a9affe140981615870e3be36c7c87a497742017fbfd2172b08e4291a5e2e0706afb32c1226e952014d871d148955aec86660a35d1ba2dd7989cc4d49870eece033403ee4b5112d805e11c3c4d26ef3488d4b2b20f81de31c723a8b62af69b57e", 0x9a}, {&(0x7f0000000240)="431cc1386e1e952eb2934ed097ee66eac96924b3c1122907", 0x18}, {&(0x7f00000002c0)="a81dadeec5b850fd14c60920725210fb6556", 0x12}, {&(0x7f0000001780)="23159bd719e313cf61bb30751b969df524b8cba9bb0c32a47cb3cd4134f8e5687410df8b7f4f08bdc2cc161c8645b4cd69cff506fbef69cfa2a73d6897dad4d433abc626e1f8ce50e48ca92367fe1ff879eef8fa1d0b6692bfe16c8c0fa6db498ea7c6dec7275150e8c2e3989c365102d8aa71069ef577bbef7ba9c4bbadc6d6952eb0bc55016c4f6fbb0ca94d6da6aced8bb02701233d3b5afd3b8d65c9d8fa69c3f0b2da9cb09e76d4841cab8f006d03ea718974aa4d6c58acc7408ceefba2932831bf66889a0a1d", 0xc9}, {&(0x7f0000001880)="7fce378ec5358e20f8ca1885100a19f578bc9ac33a5797f550d806b2cd88c477b48a92e58ac5fa63ad632868bb01da48bfa4783b7f8b0210af6f7b028654d34a6b51ac907c658199b82cd36482909d0fc2a9ff9d3f0e1a27ab80bc658878d8f7e960a1699950cdd6a8461ffbf043ac07b883c472c263d01bcdcaf0eabb3162f5f56d0e33eed98b4fb4cad9bcffff51c182d0085c7c3742069c53a7217a41ab29d676705d8e9e4d5a7a2060c75e63469369f01ec35ebe008eef2df454e98d5a1e58cbbeb39bc3152c65b56506", 0xcc}], 0x8, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r3}}}], 0x80, 0x8010}, 0x40001) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000003280)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x8003, 0x8020001) getresuid(&(0x7f0000001bc0)=0x0, &(0x7f0000001c00), &(0x7f0000001c40)) fstat(r8, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000004c0)="8f07709996cbf80e5e88aa31cf9719728fe5332f47ca662c85685864b9476c884beed4c79ff74b47b9223cc39d26ac00171383790108f402fd91bb60260bd5b680eb40c10b6055f31a4d88f47f817d0c59f4ea31ccf114b1a9c98748378fa345a481cae9230bb707bfe202b16e092fcc63be9a0a35c319d1fc5c0ec791b994432d1c", 0x82}, {&(0x7f0000001580)="4482fd863a80be2dc974c8ce15242062d6d6c74d7210fe6a512a605cd900563141182a853f57cea80014bd98bd5433d540d997cba586f57295674bede6d9d65fa842d809df0d52f68bd938b7b11117c2a22bbd882649c80b1ebc0831e4cb2671e8bd2661c55e6bcc93ff4d0a459065a7d2ada2c4c79c29d3c6e19536d461eb1b1c8baa2c708e159aba2f086833c3a457a6781e29d7baa9541f7fb82d884da0c87b66123850835b5a5ca958bc9bd0dfbfea81763c068ffd29f2", 0xb9}, {&(0x7f0000001640)="492985887ae18e68b5a55c71a9511b817824b3dae574645e1b79db40b1bb37a3ff03f82d59bac54e869f895d2fd92625c104b55ba3cd5cd42c64fb4d437dc8ca1a2199da8727b3a956e679f52f56dbeac362d78f6d833d25fa35c1e8400e", 0x5e}, {&(0x7f0000000a80)="7092f52985ea07bf2af866f64ac303118035b4781f842c1100b3a31846d7c5246d44f00800dadf3fe958916e3bd97702817830ed7370146420d3a9affe140981615870e3be36c7c87a497743017fbfd2172b08e4291a5e2e0706afb32c1226e952014d871d148955aec86660a35d1ba2dd7989cc4d49870eece033403ee4b5112d805e11c3c4d26ef3488d4b2b20f81de31c723a8b62af69b57e", 0x9a}, {&(0x7f0000000240)="431cc1386e1e952eb2934ed097ee66eac96924b3c1122907", 0x18}, {&(0x7f00000002c0)="a81dadeec5b850fd14c60920725210fb6556", 0x12}, {&(0x7f0000001780)="23159bd719e313cf61bb30751b969df524b8cba9bb0c32a47cb3cd4134f8e5687410df8b7f4f08bdc2cc161c8645b4cd69cff506fbef69cfa2a73d6897dad4d433abc626e1f8ce50e48ca92367fe1ff879eef8fa1d0b6692bfe16c8c0fa6db498ea7c6dec7275150e8c2e3989c365102d8aa71069ef577bbef7ba9c4bbadc6d6952eb0bc55016c4f6fbb0ca94d6da6aced8bb02701233d3b5afd3b8d65c9d8fa69c3f0b2da9cb09e76d4841cab8f006d03ea718974aa4d6c58acc7408ceefba2932831bf66889a0a1d", 0xc9}, {&(0x7f0000001880)="7fce378ec5358e20f8ca1885100a19f578bc9ac33a5797f550d806b2cd88c477b48a92e58ac5fa63ad632868bb01da48bfa4783b7f8b0210af6f7b028654d34a6b51ac907c658199b82cd36482909d0fc2a9ff9d3f0e1a27ab80bc658878d8f7e960a1699950cdd6a8461ffbf043ac07b883c472c263d01bcdcaf0eabb3162f5f56d0e33eed98b4fb4cad9bcffff51c182d0085c7c3742069c53a7217a41ab29d676705d8e9e4d5a7a2060c75e63469369f01ec35ebe008eef2df454e98d5a1e58cbbeb39bc3152c65b56506", 0xcc}], 0x8, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}], 0x80, 0x8010}, 0x40001) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000300)="8aed65b41a971da134c20904a7a0de9b56517310f67666aea0f7a170af64062a79231fe0ae7699b851ee548c161a879e35b7320c6d63ecb87c0186c7a8b87047c0b80cba34c0ec06ff47b93c428fc28e4f9cf84e2d421607afcc6f70eafec8de3afaf625b56af32d9046fd441f300d780e4bdaad0c4cdf689345de1deb7c30f754f0ea9ee68c92bd71ae1c5a72481434af2f0422ee7c61bb56629c0c352652a55180aee1f276c8f2f6ee254fdd0d2db30e1b8b8a5501a5aba6a918eb04b0aa22f287e542500747dac6f78b7614ed06ed669ac59b8b778535c6054b149661cdd19097cd8ff4f87d5f552970b5d631c9a4fd39c0453d1956e4cd", 0xf9}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r6]}}], 0x40, 0x40010}, {&(0x7f0000000580)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000600)="56e06d9d0ed3a8f7f678016b8988b91d79d3df13139f3e61d9d758dacc4ee3cb340246247c30c42a7c98ec7ede547beea77b10a4ac7be33f978114ca327d7c6f502110bde98b9df1213f4496e1ccab824fdbde2e040872e8a75bb23325d0450a15afca5ebe7e0daba2a80bc0a5c2e45112650b2882e99c773a781848f2cd49b4585aa6bcec79251202", 0x89}, {&(0x7f00000006c0)="4acd6b8a522d34ef3baad327c19744423b8702889c8d09e630f7724f8565feb8adddb7c41927d57566915083558ca1b909af77504e186a3bc894973bf48e3c656fa9a2c427046514169872e9ab3fec32ecceb003d156784e8423e11b6143629f64499ae7cf69a1bd94aeae9f20d2dc6e7d561ebd99596a906089537401bf4a79f170fb80ceca19262ea342636a56d74dd8", 0x91}, {&(0x7f0000000780)="015ca3991cd9205a363d10b45e8395c1c50479eee45e69ae2ee5de8c01f2f5aa1cab8122bcf3b8c886b246dbd87771d01016f137164effd56f70eb250f9cb2911b94e1aea9b405cf418e7ff2ded8accd99ae523c1b4628a03e35a2cc2ae66ea9e1910d2afe2bdd4597af07b2696db2bf6def9442f4f6f2b537e1503462887b45c29726ead2a203218dfa6d5ec883a161f8d30272d35471886f79b1a7c23f35ebcb2dcf30f50d4e213967cc2acdc4337c90bde0df14efa02ebc5a6c38e3c80402acb84cd5ab576c5693352e0cfc6e22db051ebd81bf1b536e71f471a405364fc8af096efa7f01be759393f67ab7f4", 0xee}, {&(0x7f0000000880)="660791cd3d24a70abad96a38575340e6fd4ea2bc4ba89565cfff364b08b8c715d2d3c59d977ee4fc7a77f21e465b154a6c476871a3a12b6a916b37206709cb085570d38655e33f006a358568f901c8b07eb3ff0abe45f54d71db75adc8b92c65faa7f54de716dea699684c41c2a3e1cfdfd2cf6cdf71a4392ab48020a5d41625f135b9a5e26a75c6ab7a3a30e5dc02e17ead7dce92e714f57b7731010e0aca20a1c52af2458baa7d402e922e0e8eb710c332c0f1e00013", 0xb7}], 0x4, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x10}], 0x2, 0x2000c084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r11 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r11, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:05 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x907100, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:05 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:05 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:05 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0xa05100, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 531.047581][T20176] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf0ffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 531.164980][T20176] FAT-fs (loop0): Filesystem has been set read-only 03:37:05 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x7f) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x418800, 0x0) getsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xa30000, 0x7ff, 0x51, r3, 0x0, &(0x7f0000000180)={0xa2093e, 0x6, [], @p_u32=&(0x7f0000000140)=0x1}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x44000, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 03:37:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:05 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0xb70000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:05 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x1000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x4) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 531.776160][ T27] audit: type=1804 audit(2000000226.239:95): pid=20203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/16/file0/file0" dev="sda1" ino=17281 res=1 03:37:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:06 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfffffff0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x3000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:06 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x55}) 03:37:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xffffa888) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 532.257614][ T27] audit: type=1804 audit(2000000226.719:96): pid=20219 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/17/file0/file0" dev="sda1" ino=16513 res=1 03:37:06 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x5e, 0x9, 0x4, 0x40400, 0x9, {}, {0x1, 0x0, 0x2, 0x8, 0x7, 0x20, "8596ebd9"}, 0xfffffffc, 0x782e2f6612423eb6, @fd, 0xaf35, 0x0, 0xffffffffffffffff}) bind$netrom(r2, &(0x7f00000002c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'dummy0\x00', 0x1}, 0x18) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) 03:37:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) r2 = socket(0xa, 0x1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7d, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x10001}, 0x8) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @mcast1}, 0x1c) r4 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r4, &(0x7f0000000000)="8955a02124cbde43438fa9d6f6a5653654", 0x11, 0x4, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) recvfrom$inet6(r3, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:06 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x7000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 532.985489][ T27] audit: type=1804 audit(2000000227.449:97): pid=20253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/18/file0/file0" dev="sda1" ino=17441 res=1 03:37:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xa0000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000480)={0x0, 0x0, [], @bt={0x6, 0xffff, 0x2, 0xfff, 0x0, 0xd95f, 0x18, 0xa}}) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:07 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xfffff000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:07 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x8000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:07 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:07 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000040)="5c5cc408fc0000180500201e75fdadf263569fcf69b5fcfc3efbe4b996d2d867c5420157469c218f3504d8523671c94560fe", 0x32, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = accept(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @empty, 0x77d}, 0x1c) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0xff600000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 533.703181][ T27] audit: type=1804 audit(2000000228.169:98): pid=20273 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/19/file0/file0" dev="sda1" ino=16530 res=1 03:37:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ftruncate(r1, 0x81fe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x808c2, 0x0) write$cgroup_type(r7, &(0x7f0000000140)='threaded\x00', 0x9) 03:37:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x400000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x60ffffffffff, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:08 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfffffffe, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xffffff9e) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 534.309437][ T27] audit: type=1804 audit(2000000228.769:99): pid=20311 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/20/file0/file0" dev="loop0" ino=246 res=1 [ 534.347669][T20318] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:08 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x770000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 534.409952][T20318] FAT-fs (loop0): Filesystem has been set read-only [ 534.468181][T20311] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 03:37:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = openat(r3, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x131) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xed5) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x2, @remote, 0x2}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x7fff, @empty, 0xb9}], 0x48) 03:37:09 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000012c0)={0xa, 0x10010000004e20, 0x4d73, @dev={0xfe, 0x80, [], 0x12}, 0x4}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x8) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) r4 = socket$pptp(0x18, 0x1, 0x2) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x1015, 0x4, 0x2, "4badd6671bba70542ea0e44aec77481a", "5e337c4b75b3d63bc95b69b59b0f18f9fd77cd2e0264017dabaab40d44c6f68afc1209a303b047381b68510b7e59620294775bc6543a395916850a02c3f70beffdb9c3b32ce32614e9029fe058cb86ee660110999ee6ae30a9fc6a35b70998b88da9f98ab6de1b826a86a0e6f435f940dbb3d13378c3c08d8fa7fb60064e6bc2beb2256d2e4e24f1a92fd6857771ea13ec113d9271a28c7eb12b74b1bbaed3e3887ed63397c8082f5af3fdd1d5716112e24776577c9c9e63337e342af77ff07b3c4140bceab49b2adddf1710c8867f5f65e8577634d081c8f140380dbcbd9112a1597b98a2e45b851dd5e44c801f147f4a2821218d712a697cf1eabf9c1dc3a08a74d4dd0806c27648ad34d3e4a5ff271159e3d5c916f648291470d47b61446cc290dc486ca4325b6b77ebe3e2381f00144bd5d50bccfce189c1a69f665ab18a8c04fe2dda38e993d41cfd4bf169f324927f7df1b351c83dded9329015e4bdc39807afc54e27aee76e929cf498d83e5773ef58c5c5462ed1b590319664d6bdd9917c1b0948f2a8625f233e56a4e4ae03b27d25746bbe1d861ca51af8af4d1df5dc93993f98e1616966bb45d93b6614c153b9d69635d59fede3a2aaf4a9e81506fc1e2c83a4c01204547d08fc3dd983f07f489bb026d31d541e798c449ef4aa9de263878726f9a5e15572eb9a6124b6f6a60244bbb72db97b64b338a9e3c6a82431d28b091b37eccd54502f4b644ff0f079e4bcd79b78e64ec0c1051286c606d92406139e414cea5b12b4a70296829c86e1d5fc6b1f1f5da82e562a965a6205895730a8d1ff8425b5c6a8372d8ab10787f2a8be6e8209d8cedec0944666862952570ecaf2a4898d9298478ecea02ddeba3a6635b2294fa4599123a0e1bb8e633b6a7d935c760d7e4a39079baff0c6d85250ed426f44814cbfe76926014eafd3abbd7531515891d30789bb8672c4363c84f6ec2c372547110a66d0f0fce2d31fa16a4d448c755157097483889f2aa328f1b9cd52a546654ea2ab50dd0f4ba89b42a3a4b6cafe4bc5c683f4ff03b6880896ae20f6f82ab278570dca23a74834083f757d36db84c05c146e62840e1b44d88a6ba82908a5b99a204c887b26cb54ca2c31baa1a78c37a2c32ed8d1cd9906266bc27c7d486ec215db9b4bc164bf27953edf5d6e9f507aa57b7e13a3abb56fe250b2785135432aeda2a6b168d34a4e5292fbc685c774447f217b129478eb66ae3bab3ae494089bd2b6a7091c0a2fe49aa04b16afa2565baa0fd17c068219db8f78863f539e2972ee080be0a70109a15065564f1b1da72d1520dce4b5176b41d3662b3a66e4a321cfb1e0bb4c9c5781f9d58ba6b17a5ed32e809d03c589d5212b9390c3130ad3a4220d99a51aec76e77dba6dd5d69b97efc7adc5e9a781f3f9ac4ebfc81921881cd1e16c9eedae51d47ee42a485f8fda8b1cde1252a35f0e5df55bf94b146cb123ad3fb619572ef6304bd4a9982bcec8b8bdee9e5485b9ff4e454975cc6ac77aa98cc13dba1d70c243a308cf4904a34214a46a4e87e52288761e3b41231925cd09f60a2eb6bc86715e9314223d826c6c30f741f3d5fdcc233a3ecb77b89e213f5a9340e281251a3ff13fd242bfd925e1f3f6e46b4e0bb28ccc6a7c754882cfc2b404d966fb1361e51f64e7a82f1153224e27b5b0420e31b31128430e14bd9d2680fcf4e1712a1b9e95932a74f62d0a6d30b368f96f89ecca353c343cc158daca022cbfa33de48018395c9511241f891851ee5c1434540ab34f39cea8af441b1ce4afaf17ecebf531c7a56ac3f11a71b35b235a9df211b2e58e5875d0567f85d6eb9583ae034f86332efe60a83dd889bd092c22c23fb881d21f2205a2fc3d7233175a693f7b64d0619b90e9ee2b9768123f700fb63cbed4f9cada5228c5422e56ba6cb134722f2d5790b594b877ff9de5291d656cb3c4d7cb4ae8ffbc4b452726075143ca6efcc821ed677085185f2a58e21ec219b44fbf20655d014fbf0848e8f6cf922f2db2cbd9210b49d9e4e7d24a672f82ec0aa6c9d0c86f1660f964557d10f0ce671816588005a4230993db32e2a6a1770675e915814cd13f65588a36a640e75a711579b9d065d5884bec63af357512fe3caac0fe5ca7b1e3d565c248fc0759f93dbb355eac04b48f1dc3cceb4932048b93cc035636052dd0a52ad5be93830d0416e98e6833de64e41b82d1de58046b3286738c25a85ec28f24bb48ab2de016c6c7dc2c2f6850da8fda7997d462fbc42052e6fd58ca0ee950b1084d1f84e421ddaea4eb10a877ae049a88541cb973997e04d8d13d8a4decafdfcce4b0c09369d47ec3e1bb08171e9297e81a0ee0e4f6ef985027fc176637dc3df0e0d9d4e4a35c7c37241103c46e2d4b53634a5c8c601d1a14503b41f85c4c6df209b4db40725e39a890172764dc9154e266d1857552e3a464e53993bfd11bdba8b41a8c75e784f92c902907c11e13fe3e7e6c299c2452a87dc706863ae14bd0cdbb26633a4e79f9500ba61dc18f5912e7b8e59723bd0a3c4bede870d447c2a3db60f36c4526e6fcbee8a1ecca2fa2c6d23443ee46eb0774a0d5599e7013a0a5745c9be185c40e6f6bf4a45e05f4d3b3444560fc1c3d2bfa1ce7df7ea21e823f1e94b4b911aadb0c3edb2f1f6f79ad42cc7a007ba83fbed0bf56d09f00ec7f5b190d2b084ef74882535f046b89ad95edb756a2b9edb52c143745b4db2a1dc08fd45a4e253a4d356bfc218997a84f2608d459f31944f459983b0b1ddbdd1696f28e81b905c83d958f4942a7ccf78c15c46c90eedef9a5df11fe805c61106399dd990a8dd8d6b81c52a12d0627fb3057343ad30dfdab37003848ebb18e65c36dd306866662f82f54805b48a1289284bb2fb89f058e93bc3a839f19dc6e8dd7ef53773c36f588f2242353a46eee14f851567f0d42990dbc2d5ce6d46aeebd0995fb5108da83d6a05d1dee5aa6be74f85e8c09249210f38301b9306a514c10e8c938768d416856167ae7307a93e433313c450c0adde7bd9c3ea8109512344d3f1ed7178a0d8389ad55a85e288aaf03e508012df8653074817ebc0e7807632d19d25135638483d0b47c094066ae04b5baf73a26a9bc49e95aa01b6954eb9881f9012e55f4ded73b22a2fd844cb3958ae2b01e47aa3a2d9f47416e6186cdf4b8a76ce1a91d508248ce24a3f3b9887380a3fb81f8a7ea71cfc5516d799d456d5ed86d471414a7f2a007b4385d59ee75fd920fc13651e3f2c3154969d0978a9a85def1ae396d7b4600f1f6e314b740404b1f2cd2ba49c1ab476b9789088c372ebf2fd4f90b9a9ab88092b65aec0fdc2b0dd108d37abd3177a82949dbe4f4e1e19fbfc92c482f87cc5f6d7c51c4d68812db6afbb0f15c2465256052c5d519ea682cf6d517a6ff76220da499fc90b281dc64f006f10c5b79536f9021f67db8c6fac2a48a7d5ec9d9ebf583f1e9b0b3d70c5701cc1696965fa0c0fcaf98f020e5502238f916cedb62cdf3c567dff798745b112e3bcea8556f8616faf2625454ebb4820a3eca2b73b38924e7c995cd66f257a24d9424384bd63e3774e25ce8a795b2904132cfdc46cc24bf04304e8f0235edbd85e042a0082eece6faa0f0437b35cc8b93859d42f056ab2f59a592ac776382279aa35d3e284b75ebdf02f463701951a4e5fdc5dc4721976464bd38b70fb4335e16640fcc189745f081cbfe459e9e41ef7aa40f5ae0202aa6fca9a524861c73655aef81cb4dbd1b899af01c6ba04515e9cbbd73ec2752ac574984a6694308ff617d4c5525e89984df3b007fd0faa03fe6f9ec57f9e6de50f4cdad0f5124763af3213194a1f0dacc6ef63c215301ffe8f5213a43a3d7feb6b63ae3df13840418825f7e0521abc2206a316d777409ccc29a30065359b6d9f8336ca2518ade04ef998a0b6cc291a3270ba2a3d80ed5c92070749ec987bccea7f2b37e23c396ab4a6d887b5879988fb67f5f2099a27a9ab7e7bfb335367edf6a0e89f8243cf710c0af3cb2cd487d1df6f371c80618796b1c29937c4c7b8faa94431082f5aeebe49af49f66f56dc6b8f15db5d237d5fc7c130bcb5d7924740b384da4ba285834149bd3fe3cdb603dd2e440f066793caf21a152560928ee4793be0c7f7d04d4ace19034169d78bcaed39918efd38c33a171c72f357757efbfa01a179595ed8fac26ad10efcd66152b5e87793da89204320515fabc4d79c429bd393aeb4800f7db13db52f1d22b9fc83d231609ffb8f9feed300e5876240498ced0c4042efd2af5e630b3a02212aed309488955621f0951d9c693240869359b7c98aafc8b548be5e221213c8b3560e75d8ea3a14c6f43a8e6ce83669f4a34db66837ce63e173217d5ace6238d5c8aa505f66401ec4c7928ab92caee06de40fb0741ddbc06966c0bd00e69bdb8b49751cee109266c6b9d439e75dc266f433b3aeb77f58e0361390bea3998eb0efe815361f132ed94fda38e019f2f599c7eccb7e9023de58212f1a031483cf5b447513abc7f9d0f73e075edfd857631db79bfde4537fed6278a9be7d4d0dd934543708705909ce294db8b2eee1528b5fe27473556058323e3cc1821a66a70ea3d19c7824447d32a08b4a13cf1fda61064bf53f175946d9baf68fc01fd4eae5aad9c0c9d1dae0bc584fff8ca35cd299ff81cf98d23fd153664b3447f8ccce8c5b8a95a1068eb8fe61ddf568acdd8425b802f0c5e9d13c9878160f348c0692d016bc0f5f6fbd1b5e95eb320feda70ddec76e712649e39620652762a7d17451dd65ac86fe42212e48194146b352b408208873f7066f9c09587493001488e0bfd577fe8dbcbf16ad71628a6dcd4c2d1f84c20447c61bd707b2a12d1f4b34fb0dbe126e4fce9addc7405eb9b8b5dbc5adcb8412fd6fbce0090200521cc5987f124dd27494078cfa3ecd10efd8618fadf9c3b0d69b87bbf5235560aed10a0cac11464915e65191996f5e99d207b3ac2f8c179122c615b4051c6512fdc6082cd25144488206d268b8d844127e20a6dc92d8425b29d5badb73444a1b213ab1e7846bcf6060d4857149d3bbec869e649958689363f7cd31749a2d7d8e715bb6a6520c915871ff74982b41dc83f7b5fe079cec1a4257059c4c7c0d5e3e788a8072f8d11fffe25ba1cad278ec5265bc80344ab69253f9063ec7ccc0f6fd51ffa4e574c7d0e3de827cef59d62e2f68dd8e81711729ca2b3c3424e6d51162e5abeb281a8f486a9abea8157217167768bf9a046199ee2c066df042b8b997b9b57a65c6b2618946dd981a4ddd827fd8ba2656bce6318932062832bf0c531f0324708715193cbaa398ebd196df140ca53ae7b113ff91bb0e35d164f1c577b78fb8ec0ad82ffed75c163671edbde613a32a4c95d084357f0be47ffb35e8a64abcbc3cade3da6c0c9692324613e5316d87c3e429a34a1fcba1e4d439e5d98c11f8ae18a8cb30570c65006fe185e1dcddf8c8852ac680c302ed4da116cdef04fcd313c7d5d2f27296e40320e7673d38559e2e053ded4582d091bf8b2de1ac25df3796ada54d02c7022cf9aa0cbd70cb22d4f2caac8269aa8fd3d4a46c4e1be25e443e9d699514412dd5d98aabf140357b0c94e5998225e946b6dbb0f88bbb927c3dea10810e564eff9aa2f4a01160f0c2e90078dd29ded2ea0d4de407b65725f712d8debf377ccbb977cfc2e7496c7db59960e1ccb424adfebeeb6f07a89e91c529c4862cac21bdb4195e047c32c905d671387ec7d075fb72fa5985f351f6bff665cfefe514f2c217e39"}, 0x1015, 0x1) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}}}, 0x24}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001380)={0x0, @multicast2, @local}, &(0x7f00000013c0)=0xc) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0xc00, @remote, 0x3dd6cdd3}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000140)="342776d8eb47fda027aed36efb2a2e6f0499c47ba29685d5eea08df54d3036894151bc375efda18887518a47ab43689b137dd8f2cc8bb741bc778c91eebb1ac9bcdb7a41ad2eafbc1c6d6704fd512b4ae1", 0x51}, {&(0x7f0000001240)="7d4f38116c6cd83a0e5ab75774afa3f759d7af1e3c546c115b8e9fdbab133fbebb2314e5fd97ac8cccf022d1a6503ea6313b", 0x32}], 0x2, &(0x7f0000001600)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x33, 0x14, 0x2, 0x1, 0x0, [@mcast2, @initdev={0xfe, 0x88, [], 0x4, 0x0}, @rand_addr="4ce241f0426ff7c767872ca4d795345b", @empty, @remote, @empty, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @ipv4={[], [], @empty}, @rand_addr="67d32e05dcb553780f5f28942c496ade"]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr="3aef8a24307f57d42b361aee3c399f39"}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r6}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @rthdr={{0x28, 0x29, 0x39, {0x88, 0x2, 0x1, 0x2, 0x0, [@remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xcd}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r9}}}], 0x1b8}, 0x4000000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000040)) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x7fbc81c94000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x7fffffffefff, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 535.143696][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 535.209834][T20349] FAT-fs (loop0): Filesystem has been set read-only [ 535.260691][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xfffffff0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 535.307569][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0xb70000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 535.358430][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xedc000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:09 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 535.417163][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 535.472655][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 535.554094][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 535.614660][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 535.695245][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:10 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 535.753401][T20349] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x20720000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:10 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002b40)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000002c40)=0xe8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) accept4$packet(r3, &(0x7f0000005100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005140)=0x14, 0x80000) sendmmsg$inet6(r0, &(0x7f00000079c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x2, @rand_addr="73795fb62536342c465e5a9762bf830d", 0x2}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000080)="f6352b97c5c7211b6329d5eafa969518955ee86817ead6bdb729d530e4a6f8dc5d8276a69cd9bca1445fbe", 0x2b}, {&(0x7f00000000c0)="ce64d5e31c89bd6e3c97ebced9075ab54c02ae5fc17a357b5d72", 0x1a}, {&(0x7f0000000140)="6a0640a19ad376f151099a0ad0", 0xd}, {&(0x7f0000000200)="0be0ce11e242d55868f0f54de4c29161970efaf5ff560b3b2f1fda3bbc55c325f17ad95d022ec4d683ac597368a815b700f0312e4c148241fc064a608ef98229b1757fa3566cce31a19583e44a9ea7b4b641bfb995b228d6de3d9ffe0edfac74e7d3491e75e95be8a4363bf96fad677761d605b2e5b2a8488c56e2250e70f4e12995cb1bf8738fa5a9b568980a081f72a0a98b427cadba6f70a34b5851ba6f311409b390a79b2cd518ea1e4a7206a70f9f", 0xb1}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="ee3f1eb613d02e5a807afdef5f96e66541e1e2adea9027b379aac2a9d8a536720e2953b3c31874aa29ba70b37c5dea103a82fa34549ddd86dd3784db56a86e9688770ddaeedf60c04e1c5669d1bb02b3e1d046c1aab6960e17a3eb58d50e9a85f24396615ab0c92acee2f64c84225c60f0d4baa84131b62e8557f1a8928bc2b7cbe3c41b3e9d9a720b6ff95fc1c4da6416338dbe0dbb38852e6abdcf078adf6101a6514676fb46bbebcb09e746a1714ffb980f3d140ca6219fd32b26ee7f5a509d1f933dd97abebecf68b0c9b5eb22688e08c0e0984ac8a5c8016ea8768820f56796bf77ac73e943373b4887b3b5", 0xee}], 0x6, &(0x7f0000000180)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2e, 0x2, 0x1, 0x1f, 0x0, [@mcast1]}}}, @hoplimit={{0x14}}], 0x40}}, {{&(0x7f0000001440)={0xa, 0x4e23, 0x1, @mcast1, 0x78000000}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000001480)="347e68077968b028add8dda88fa0c4ace8fd800eaf07cf17dfecea48cf7bebf6a9b0aede7d37060f", 0x28}, {&(0x7f00000014c0)="975194ffdf7a9859c2b38b67de273457115613a08c555574d0f3a07b1fe415ca875f0109923217b3ef3b6280902ef8187a8d53ce83eed9d23307a1ada7c16929adab79b4815624fe53b0174c94cb64ddbb4a2e5c82bd8a2c6bfc15724d85b71cead8eaed2989c84f1626543e17bf6489a7e8014be3d63c47583a1be52e4b58c1533ead41da11295a37caa43aa7ade28892320b26fe1ecc5959551383fb4ad80ed326c44e7a4b563a846b8c4c5eb133e2894c8660c3a7a93cc20e87d487f4e1ce012fc247bbc02a8c96d13b4392a1ebe5aacb6b0bd28a26", 0xd7}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="034c6e85198898e74871432f7a5742eaccb68417e179b89cfb30fe33eb078e", 0x1f}, {&(0x7f0000002600)="40b3c13b5ea0c9b3bd2991d41619b75a18ee8d84852eae10086bf19897adeeba6c012bdb62984b7d36431b68653c8382f7a39c31e9fb81db5f7b7704725141fee335dc2d3e814343c49ddbc4223d2690b98e2bde72cb0226a10be232debe8484a0dc28a3dcbbe972f6aacd48e0b80e9f1768427ba1d73e450b3e74eca339db83db0fdb8421e72fce78c8272b6a1fdbf97b1e2f71ad2cd8fcc73e1cc5c6f1e65334b1c7da8092aa342847d684bbff81cc336e517f2e1b91a2fe07afc92f483657e85744", 0xc3}, {&(0x7f0000002700)="858fe20540d20eec5d58dc8d81d3a949b6ce0ea578b997a9d849134470317d733cd7518529e4b3d319c3a6a228091613758f61d0919573ebb38b8042b6546e288f98a6b246c6297f99264e6a6910e514d1cd6282c1b1843b11c78696a1e77cb9461328d639378794dcafda9bbded8df39f62f6c6b3d159792a42c48141d7e0", 0x7f}, {&(0x7f0000002780)="b438e856a591923cea2390b951f0ae42c019562c0dc5c23c0c98ae04876793774d719b95ab10d84955d5d3c53ad807f76bd68f5e4d7dccc2bae193097c31d69b38413d4b8f88ca7c05f785dfd891f6e0d178072c0696d9061597", 0x5a}, {&(0x7f0000002800)="6f45c6f8f926815e39d6811a38cb2c88d00f083356f82180c8e184c45d6ffa84afbe232e171afa615e80898fdf2d9a11fe48f497b6382c09384c454759e7cfe4cb283c25c3d9510d0e8933dbe085fd29bbb97f57dfd764dfafbd698a709f9e61364885fb2abf37a170ec234362c16560c52d0feceb32fda704e3de9caa0b312a6c02d54f3e4d63656711411b07f27c9bf7a76aef19070b568be14b35f32455d5d664e292711df5bc262faf59a5fbfa74dce9878ea03f77d66f55d3f0ab5fee5a1aa36b6c51ed6d45c520da2a991d333336789ce23e0a33429aca444a80b1365d86553e3a873ff59ad1ffc46656127c04fe0c3517af46af9c", 0xf8}, {&(0x7f0000002900)="b2e125c4611bd4ba7eac3d29692d26939440767142fa96e7d2da2b0540e3be775d43dca8e8724305b2019fd9da8e68f9ec06d911d2c2f4ca61a304bd343ce15c986b644e8240cdc1bcbee2a34be531c76376cb95fcbdc8ef7b4189a043f462bde4a2bb0690d4efe2c62e639264617bf0d8dbefcdb9f3d9478cabf3ef7fd8c8d47b88dea1e4e65410152dbd41ea045cc06b1e7eb57ae13b107ac7f7e40c3db124858b3970efd8cef8f018febbdf", 0xad}, {&(0x7f00000029c0)="ee5dfd3b694a65c5b2230691e070b2b0f210f969220374903ad46668f66f95a43e5abc45032be805ee2e0372a9568da670cc819aed7949a0731c7591c81e49a4e0076d3e2afce84c05ee59986ec513c445a72ef3368d58c16e0006eb412f0c71d1439b76b4105d95d3d4d94aef2b69322c4344fed9d572e3596e6fd715182c134c31091780f06aae", 0x88}], 0xa, &(0x7f0000002c80)=[@hopopts={{0x78, 0x29, 0x36, {0x2c, 0xb, [], [@generic={0xb6, 0x46, "ffb9e6531e4a3cdf78219e39c4ebe83925eb465f62edc3054184c0e9a2c3e7da1a767cf6b0cf44d69fdc2238bf4fe45b45e63f4d47d5737d7816075fa6a5554dff6157b4a823"}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x23}, @pad1, @ra={0x5, 0x2, 0x400}, @jumbo={0xc2, 0x4, 0x40}]}}}, @dstopts={{0xf0, 0x29, 0x37, {0x2b, 0x1a, [], [@enc_lim={0x4, 0x1, 0xb6}, @pad1, @generic={0x7, 0xcf, "61f0725ba802cc93f612b3755a2e5013617b6cd10d6dda4e324f498be7b1050138443c9168daba98a8ae63481c9194e438ba7a27cc1da96a7e98055d42148edf7bbd23e315bf9e746c6941a2a2cf1f14e761ad77dd5a9702fd1c3031f591587bcae6c1421f10100693cc4a7777345172552163a1b271e05c7793fe68669dd62ea4351b37fabe576bb879edfc14544fde76dc524e8b63cdac6cc878e2ac58b4339f4b76ed541660b88086d6d330be9b29569b14a703ca9892d4c0d358b7b619a58f23d7982973c33ed2462658a83672"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dstopts={{0x18, 0x29, 0x37, {0x2c}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x0, 0x11, [], [@hao={0xc9, 0x10, @mcast2}, @pad1, @generic={0xd7, 0x52, "4af95c0ce461da80caa10e7ef1555a408360288e38aebb11c99aba50cdff06c9ec167c003b219ea68bdf1e34e8d437f5608dd450b835063c6c3258dc9640c68d7a54919fc4b4c486714e667c63abc4a644af"}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x2d}}]}}}], 0x280}}, {{&(0x7f0000002f00)={0xa, 0x4e22, 0x7, @mcast1, 0x80}, 0x1c, &(0x7f0000005000)=[{&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="69c538fda695124f87f4fc601bbca164ca83d8b9bea64ad82277e35e1c723f865b1ade660a9773d6575a3b3a868f1bce6596304651fdc921ca8d786fa810172907881d697a0d9dc1413398a7d07cfaae183d0b509495f071d7b4e55ecece8a7a07dc78642172370f920fde40ad25f66ff45925410dbbabb87d2b5bf88f0b85b33258476b1af0e11ef4745f7860d4514c0e243c9d620337", 0x97}, {&(0x7f0000004000)="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", 0x1000}], 0x3, &(0x7f0000005180)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr="aa20d054b833c0cacee1233717a51e16", r4}}}, @rthdr={{0x98, 0x29, 0x39, {0x2f, 0x10, 0x2, 0xfa, 0x0, [@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, @loopback, @rand_addr="a92da0e1163472414ee457cef7643aa0", @local, @rand_addr="ab73e9b4a843576225eccc33a8d67371"]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, [], [@jumbo={0xc2, 0x4, 0x80000000}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x84, 0x0, [], [@pad1]}}}], 0x130}}, {{&(0x7f00000052c0)={0xa, 0x4e23, 0x5, @rand_addr="15f85ae111edd2b6e65a0fe6dc69babc", 0xffffffff}, 0x1c, &(0x7f0000006380)=[{&(0x7f0000005300)="6beb97aa1e104c1b4ac7932138090c4fac6df77936b1b68c56d611a7c13f2a6ae18f1e99368510f116f86bbd21e37b1e2ebb21f6a71eed766120d88ba03d2df8de726739355720fbe51c7f17e40fdf14cedd0061", 0x54}, {&(0x7f0000005380)="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", 0x1000}], 0x2}}, {{&(0x7f00000063c0)={0xa, 0x4e22, 0x2e1, @mcast2, 0x1}, 0x1c, &(0x7f00000076c0)=[{&(0x7f0000006400)="80dba510db2bc6d334bbec2af168c09c355e025a5b3c1ce855caf36e10907dcb9937b385a75eac6d74505b8cf57154f73026bb1b927511b15cb6b6e9763768fde979cc2933c21c6965e45adf1d", 0x4d}, {&(0x7f0000006480)="ff1e56bfd51412f221bc644c8152b0ae93e879a18cb567df9e64c4b7a5fe897ad464b7206b3c8ecc97ddee84a1176f7c8b5d38adecf9f2d37cdcd12cfe4705d0a6723e51533af54634d834e792a9a5c26fc6a4f5dec094ee8eff23c3435746e95bc11aba32bb1eec167f29df4dc48365b8a5aec8101721aff3500a5ecde5d74b358afec0e3802b7ae488d2279164b7eb203bf7726a403d5c4a61e66a3792e24391327196d726dcd4baa32d90400a8817aa5e575ba4367519ccef3ea5c01abd6e66991001c720b44943f679d155229871c384f1c525e04470a60eeaf18c5fa4db1d31a4df9bd667c63ecd37dfb4", 0xed}, {&(0x7f0000006580)="018c1748dd61e0d6fed84b15682a21cab9d9eece626b66d4fdbf93c900025e2fd53fb79160fe7ca76d5ffc69e81c9e", 0x2f}, {&(0x7f00000065c0)="f75587fa6e152aebca4018a90f42a361fc370473150248d2230b2dbe3e45efc4a0792881feb3200d34f18da1ba53a63e6ae54b0d0e9c41dc492bc8a707553f220abadf58526735c3a29997b8cde63b9f352c95a5765fe4783f5dee59c0e275cc94dc83d24f1e8c6e88cd51c75c0f91fa32973d03d142bbfc8d5ee643d847f7f00b97768ac5fd8bd25ac2491daccb601aa1f2d5ba8abf2db5d511b7d2003b9389a7b5d3e1953022153cca4a948866a0ef1560a9b2d72b00424255d400708591e9b872ffb2503e4759f43a8bd913d484e314e31e076000e3a7c53de48bfbe570dc888cfa9cb2a053058aa3ebf878", 0xed}, {&(0x7f00000066c0)="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", 0x1000}], 0x5, &(0x7f0000007740)=[@rthdr={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x1, 0xff, 0x0, [@empty, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8ff6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x73, 0xe, 0x2, 0x20, 0x0, [@rand_addr="c81de94b41c842def86884db560b0977", @mcast2, @mcast1, @mcast1, @empty, @local, @ipv4={[], [], @remote}]}}}, @tclass={{0x14, 0x29, 0x43, 0x430}}], 0x108}}, {{&(0x7f0000007880)={0xa, 0x4e23, 0xffff, @local, 0x4}, 0x1c, &(0x7f0000007900)=[{&(0x7f00000078c0)="9f79ef8514d00037971001993ee90a6c3ec2921a1983a15f8005fcea1fbc1bb53769cc3da05a8601936653872fc140ff6108", 0x32}], 0x1, &(0x7f0000007940)=[@flowinfo={{0x14, 0x29, 0xb, 0x87b}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x60}}], 0x6, 0x0) r5 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r5, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3c906d6b66732e666182000604010002000270f7f8", 0x16}, {&(0x7f0000000140)="37cfddaa43d45d8c409fac6d266841b8506bda012d2794a4e12f1f4614b8d734cad3efb375f840362cf8d6aabc992073b5289191edd1e47e8a55eac272a94fceb7092ebf8ffea37fe42dd1ff4730b61418e669fc3d474cd83d38f9961c696f762b450302be1210196326104f0c84de4bb8c37dcadf75cf44115042c4d6b9e6a6753d6d45473166d066d01b12888207e82078", 0xffffffffffffff2c, 0x2}], 0x29104b5, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:10 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x40c981bc7f0000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:10 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r2 = gettid() ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) tkill(r2, 0x33) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r2}) ptrace$setopts(0x4200, r2, 0xb43, 0x4) r5 = socket(0x2, 0x2, 0x3) fsetxattr$security_evm(r5, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "2eb7f3af333f4f8546f4f6b3da9e57165f835c89"}, 0x15, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:10 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:11 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) recvfrom$inet6(r3, 0x0, 0x0, 0x40012041, 0x0, 0x0) 03:37:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x4000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x90710000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:11 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:11 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0xa0510000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 537.005975][ T27] audit: type=1804 audit(2000000231.469:100): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/22/file0" dev="sda1" ino=16488 res=1 03:37:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x222200, 0x141) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) fdatasync(r1) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:11 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7d, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x20c, 0x7, 0x4, r4}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x4, 0x4) 03:37:11 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x30000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:12 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x7) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:12 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:12 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) syslog(0x1, 0x0, 0x0) read$alg(r2, &(0x7f0000000200)=""/4096, 0x1000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = dup(r4) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000040)) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000001200)={{0x3, 0x0, @reserved="131e2fd47868d4c27a660478e52b39ff0015b87079cdc9000400000000000099"}, 0x5d, [], "1e198df3e00000000000000000c70850b8b849d4e9ad066ae1b6e38099d7d6363e47f99b87cdbb8c01f92ae1e002f8a14520f6de83f6c6cf9ead6bc41c305ec1a0b3a8769e8b3c5aece92b82330f9ae54ad67f00261e2acaa345fa3856"}) r6 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r6, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x0, 0x3, 0x0, [], [{0x8, 0x7, 0x50, 0x3f, 0xfffffffffffff801, 0x8}, {0x4, 0xf1a9, 0x3, 0x1c, 0x0, 0x7e}], [[], [], []]}) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000001c0)=0x1) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x5e001, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:12 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x40030000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 538.567351][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.588907][T20481] FAT-fs (loop0): Filesystem has been set read-only [ 538.598983][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.610910][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.635034][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.675028][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.708535][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.726659][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.736922][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.752363][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 538.766326][T20481] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x800000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) accept$netrom(r0, &(0x7f0000000140)={{0x3, @bcast}, [@null, @default, @null, @netrom, @netrom, @bcast, @null]}, &(0x7f00000001c0)=0x48) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:13 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:13 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@local, 0x3, r3}) r4 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r4, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000140)={0x1, 0x5, 0x5, 0x317, 0x8, 0x9, 0x0, 0x1, 0x4}) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0xffefffffff7f0000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0xffffffffff600000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x1) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r2, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:13 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf0ffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 539.462103][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 539.494192][T20516] FAT-fs (loop0): Filesystem has been set read-only 03:37:14 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/38, &(0x7f0000000080)=0x26) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 539.540922][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 539.566639][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 539.631031][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 539.699238][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 539.770868][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:14 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@ipv4={[], [], @local}, 0x37, r4}) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 539.818678][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 539.850737][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 539.894742][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 539.961959][T20516] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000340)='vfat\x00', &(0x7f0000000000)='./file1\x00', 0x8000, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000240)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x800000000}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) uselib(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000300)='./file0/file0\x00', 0x141042, 0x161) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0), 0x4800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x53) 03:37:14 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x8001, 0xff, 0x3f, 0xfff8, 0x5, "6716751ba8379c28"}) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:14 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:14 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 540.322759][T20568] FAT-fs (loop0): bogus number of reserved sectors [ 540.338674][T20568] FAT-fs (loop0): Can't find a valid FAT filesystem 03:37:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x100000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000140)={0x5, 0x36314d4e, 0x0, @stepwise={0x87, 0xa, 0xe3, 0x900, 0x7, 0x1}}) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) recvfrom$inet6(r2, 0x0, 0x4b, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) write$binfmt_elf32(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1bb) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) sendto$inet6(r4, &(0x7f0000000040)="e95bb8265e7b5e9ee00057caa4c8e3e196f4c60697e130b40fc272c272bd7d8a8a13b3d1d4a40be303a3f4ffeafff6fc86db59c3be7868c932b9180cde3dcc672875ad87b34057bc5e747ed1a2b91f09885ffdb0d9442ad5b433b1", 0x5b, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @ipv4={[], [], @multicast2}, 0x7}, 0x1c) 03:37:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 540.681846][T20568] FAT-fs (loop0): bogus number of reserved sectors [ 540.741126][T20568] FAT-fs (loop0): Can't find a valid FAT filesystem [ 540.758866][ T27] audit: type=1804 audit(2000000235.219:101): pid=20576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/26/file0" dev="sda1" ino=16577 res=1 03:37:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x402c2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:15 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x7, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x200000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 541.279048][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 541.332192][T20602] FAT-fs (loop0): Filesystem has been set read-only 03:37:15 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:15 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0x7ff) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 541.393179][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 541.469415][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 541.516354][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 541.557603][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 541.604606][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:16 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) r4 = dup(0xffffffffffffffff) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000140)='batadv_slave_0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="cf2af50c116e341907ef0493dfc3b00f10aa0fb03439e45ed916022c080000f20047ff71f3c0ea26cc060e086800003709b16e3841ebeccc23f0d010889b91b802000000000000000e5e7e004dcf67350b4327e760b7e8d8c07a4e18d296c03058061296b7180dcb5a7ed54d36fd8ebf9e95be30807b7b19c4ee906e536cdc4b5d5524d66c94000000006170672c305ee7dd6c4f6b11cd9ba7b0531e5453be9e5915252048e9edfdd140ccf133f76e52827b50c3e7c197a279400fde3d3207e4a9a83c42e924230666431b2b484f4fe8e2a91463d1414c4e48e18758eb2a7fad9b2a4357a3a020423e99e1f20f8f87811d21e7c7418b945d4d53c0db72a9b119368d0abdb83aca2b7285e50599", @ANYBLOB="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", @ANYRESOCT], 0x0, 0x1b2}, 0x20) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 541.652483][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 541.710683][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 541.740857][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 541.769779][T20602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) 03:37:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x500, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x300000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x700, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 542.333091][ T27] audit: type=1804 audit(2000000236.799:102): pid=20646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/28/file0/file0" dev="loop0" ino=261 res=1 03:37:16 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x500000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:16 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 542.379578][T20653] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 542.478305][T20653] FAT-fs (loop0): Filesystem has been set read-only 03:37:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x4000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x281001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x21) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x60ff, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x7700, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 543.068316][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.079345][T20683] FAT-fs (loop0): Filesystem has been set read-only [ 543.086963][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.096501][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.108315][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.117732][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.129069][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.138882][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.147945][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.157096][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 543.179520][T20683] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:19 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={{r0}, 0x8, 0x81, 0x100000000}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) 03:37:19 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x600000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x400000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0xb700, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:19 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x22, 0x0, &(0x7f00000003c0), 0x284000c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x18d7a9d3b3b04945) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x2, 'vlan0\x00', {0x4}, 0x7}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = dup(0xffffffffffffffff) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000080)={0x0, "2c000000008c0000d5648f560052ff7f00", 0x1, 0x1}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r4) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) socket$inet_smc(0x2b, 0x1, 0x0) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:19 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x40, 0x7, 0x5, 0x1f, 0x3, 0x6, 0x9, 0x360, 0x38, 0xcd, 0x4af, 0x20, 0x20, 0x2, 0x3f, 0xd5}, [{0x6474e555, 0x5, 0x2, 0x4, 0x3, 0x8001, 0xd425}], "30dced009087902952c0d43edab5f558960c4e06e7d0b4ad9c0e124d27eb14261d11a731086d5e89ff49bb72f1c43174a059133e4a8e5dc33459f8233fea1d28fc73751ea5932ad16b219423eb37e97be7bbe181eed3a8506c440092f5175fa7dc72d8f975ef76b79648ce1f7cd0ee6ff52e3b1d784336107929edcaba321e1b1088ebf2b242347a96dd4aba5055a20e887420c6a3769effd3bd958db1ad791ccd3b996f07dbd7f70e3a9eaa8c9fde434e6c32419e2693c60a663ec6b9e73333f895e3c75a1d12b0f4ed8f2a9de650f07b4fd06f432a5c1c21d836a9faf4e2de7e9a6640c408d805b37d592f7c0025a3feccdbdb02", [[], [], [], [], [], [], [], [], [], []]}, 0xb4d) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x207200, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 545.074032][ T27] audit: type=1804 audit(2000000239.539:103): pid=20707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/30/file0/file0" dev="sda1" ino=17409 res=1 03:37:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:19 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000f90f17e50efeb68af9b483cf578aa489cb5f724b54beb21650154b0c3797bee1e3f9dc801c63d6b95f686bdc6ca3cdc7fffbba7958e81a1739e97b79a90f55d38d37c4e4c857411860bfffeec6db40f63429896a525f5cda6520ac41289694020c898405e19b38d23b998d6a1876a1cb1b4c15843bc7be4aa594e11f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x7d, &(0x7f0000000040)={r6}, 0x8) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="7486000008", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x7d, &(0x7f0000000040)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x8001, 0x0, 0x4348, 0x8, r9}, &(0x7f00000000c0)=0x10) sendto$inet(r1, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:19 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @rand_addr="00000000000000020000004000800100"}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x600000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 545.759330][T20737] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 545.807312][T20737] FAT-fs (loop0): Filesystem has been set read-only 03:37:20 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:20 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x51a000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) r1 = dup(r0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000140)=0x7, 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x35f83000) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x719000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x722000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 546.396218][ T27] audit: type=1804 audit(2000000240.859:104): pid=20769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/32/file0/file0" dev="loop0" ino=270 res=1 [ 546.468930][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 546.507661][T20769] FAT-fs (loop0): Filesystem has been set read-only 03:37:21 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x140000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) inotify_init() bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty, 0x2006}, 0x1c) r2 = socket$inet(0x2, 0x80000, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) getdents64(r5, &(0x7f0000000200)=""/174, 0xae) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) r6 = dup(r3) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) write$P9_RFSYNC(r6, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) sendto$inet(r2, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xa00000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 546.528276][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 546.559703][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x770000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 546.650679][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:21 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 546.713544][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 546.750994][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 546.786983][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 546.809888][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 546.828142][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 546.846447][T20769] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 546.867857][ T27] audit: type=1800 audit(2000000241.329:105): pid=20769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="loop0" ino=272 res=0 03:37:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x907100, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x4c0, 0x142) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0xc30, 0x4) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) sendmsg$rds(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/82, 0x52}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x4, 0x0, 0x0, 0x90}, 0x20048000) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 546.970073][T20769] syz-executor.0 (20769) used greatest stack depth: 22160 bytes left 03:37:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0xa05100, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:21 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0xb70000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xc00000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x1, 0x6, 0x2}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:22 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:22 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:22 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:22 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x2000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:22 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 548.199620][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 548.220116][T20856] FAT-fs (loop0): Filesystem has been set read-only [ 548.239415][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:22 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 548.259363][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:22 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 548.330857][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 548.348939][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:22 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x3000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 548.390364][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 548.486173][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe00000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 548.547001][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 548.574967][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 548.600707][T20856] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000140)={0x8, 'geneve0\x00', {'batadv_slave_0\x00'}, 0x3f}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = dup(0xffffffffffffffff) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) sendto$x25(r5, &(0x7f0000000180)="ab184aefb0a52380a54ec0d930577d42f4e01756b3606102c23176f8c791af9c46c5064272d4b5c78d57d7d1ee41026c2259d16abea1962c262f7be2f87fecdc", 0x40, 0x48000, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) 03:37:23 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:23 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) accept4$packet(r3, &(0x7f0000003240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003280)=0x14, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003d00)={&(0x7f00000032c0)={0xa20, 0x0, 0x1, 0x9, 0x25dfdbff, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x8, 0x9, 0x5, 0x6}, {0x139c, 0x44, 0x81}, {0x20, 0x20, 0x3, 0xfffffff8}, {0x7f, 0x0, 0x8, 0x7}, {0x1, 0x89, 0x1, 0x8}, {0x1ff, 0x20, 0x81, 0x80}, {0x35b8, 0x79, 0x1f, 0x1ff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x0, 0x7, 0x98, 0x1}, {0x7, 0xe6, 0x81, 0x7}, {0xfff9, 0x3f, 0xf4, 0x3}, {0x2, 0x6, 0xf8, 0x8}, {0x7f, 0x8, 0x67, 0x8}, {0x1f, 0x7e, 0x3f, 0x1000}, {0x200, 0x1, 0x0, 0x9}, {0x5, 0x0, 0x81, 0x200}, {0x4, 0x20, 0x7, 0x136}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0xc04, 0x3, 0xff}, {0x0, 0x6, 0xf, 0x10001}, {0x4d8e, 0x2, 0x9, 0x9}, {0x8, 0x20, 0x81, 0x9d}, {0x8001, 0x2, 0x4, 0x401}, {0x8, 0x81, 0x5, 0x7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xf8f}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x20000000}}}]}}]}, 0xa20}, 0x1, 0x0, 0x0, 0x400a0}, 0x80) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:23 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:23 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x5000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:23 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) fcntl$notify(r3, 0x402, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)=0x32) r4 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r4, &(0x7f0000000200)="714d7001aae0b4f1c8540cbedfb668ea04156f4600a00cec29c1de86959d0abf9b384eb9f3522df7b7c66c75b9b9a9cc4f767ee9bda1cf27df377cbefd1310b9f02e469d366511b773b409f141e949493c6c3d85a72256fe37ed9452749936705c71a7b103460aa4a843a8444c125a1fd005d1fe538dc7c4647efb4908000000560d75f5bdccc037cb55b68b91124de67f451c414ed8784a11f72255a4c599caed9696ceca03eb85275ffac45b3fa11d1e1170ccb3b61ee4304d7269efe368e2a2f2a2b5", 0xc4, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 03:37:23 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 549.369266][ T27] audit: type=1804 audit(2000000243.829:106): pid=20891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/35/file0/file0" dev="sda1" ino=17137 res=1 03:37:23 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) accept(r2, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x80) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf00000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:24 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x7000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x7ffffffff000, 0x2, 0x0, 0x0) 03:37:24 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x8000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x4, 0x0, 0x0) 03:37:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x2) [ 550.096400][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:24 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0xff600000, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 550.140895][T20930] FAT-fs (loop0): Filesystem has been set read-only [ 550.165311][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x4b) [ 550.227625][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 550.252781][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 550.272205][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 550.324053][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 550.361559][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 550.394956][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 550.411348][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x4000) 03:37:24 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 550.478873][T20930] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="80b1a727b1bb36c434dcfb5c40c7c28e3cf8492e179a9c41810cc3fc34003bfa", &(0x7f0000000480)=""/4096, &(0x7f00000001c0)="a8d17636c534919b7e78f4d9bfba50240f386106ca9a9b1b94d1034891dced00a7dec92d", &(0x7f0000001480)="047de617015c5702951f5aaf9a6ce06e597d259ebcc27d97abe96aa3cec6923ac85ceeceee0813f1224cda8c64e9dc5c3e963c11731587831ade669a446bdfc405026da1ab65f69628b6fc15d2305f9bb96efc423f40c66fdfe833af7532ac03f7bf91aeb3d5a45892a6cf8c97b63254ff979bb6ec3631f67c6fe6ac56a0f7a2a0a7634ee6c26a75e1c39556293076d6ce8800", 0x8262, r0, 0x4}, 0x38) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:25 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1040000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x1000000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x4b00) 03:37:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x60ff) 03:37:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x7700) [ 551.319100][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 551.375200][T20993] FAT-fs (loop0): Filesystem has been set read-only [ 551.405730][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 551.460915][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 551.501618][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 551.532123][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0xb700) [ 551.574895][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x1400000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 551.659263][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 551.716492][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:26 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 551.798033][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 551.842240][T20993] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) sendto(r2, &(0x7f0000000140)="f123c6b6228dee0c4e6abe814a724a5ee416ab31c0b68679a0e20d45314d3716249f54a7a2193f09368479", 0x2b, 0x4, &(0x7f0000000180)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@bcast, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r3 = open(&(0x7f0000000300)='./file2\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = dup(0xffffffffffffffff) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000240)={0x8, 0x755, 0x5, 0x1, 0xc, "5e2b7a454f8ddf90"}) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:26 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1041000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x207200) 03:37:26 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x400000) [ 552.601993][ T27] audit: type=1804 audit(2000000247.069:107): pid=21026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/38/file0/file0" dev="loop0" ino=282 res=1 03:37:27 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x51a000) [ 552.730116][T21037] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 23) [ 552.766197][T21037] FAT-fs (loop0): Filesystem has been set read-only 03:37:27 executing program 0: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f00000001c0)={0xa, {0x3, 0xffffffc0, 0xef}}) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000180)={0x2, 0x9, [0xfb, 0x100, 0x1ff, 0x404, 0x3], 0xa5}) ftruncate(r2, 0x8200) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:27 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x3f00000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:27 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x1100000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x719000) 03:37:27 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x722000) [ 553.476489][ T27] audit: type=1804 audit(2000000247.939:108): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/39/file0/file0" dev="sda1" ino=17663 res=1 03:37:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffff8, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x290101e, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000180)='./file0\x00', 0x400041, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) dup2(r2, 0xffffffffffffffff) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0xfffffffffffffffd, 0x200, 0x0) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x9) 03:37:28 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x770000) 03:37:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x500, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:28 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x907100) 03:37:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x4000000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x700, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:28 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x2000000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:28 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0xa05100) 03:37:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0xa9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000140)={0x9}, 0x1) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8204) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = dup(0xffffffffffffffff) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000003078600000008ac297c00001f0900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x480d0}, 0x24024050) 03:37:29 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0xb70000) 03:37:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x60ff, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:29 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x1000000) 03:37:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x7700, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x4f03000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 555.226891][ T27] audit: type=1804 audit(2000000249.689:109): pid=21128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/41/file0/file0" dev="sda1" ino=17674 res=1 03:37:29 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x2000000) 03:37:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x88) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x4, {0x6, 0x4, 0xde5, 0x9}}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:29 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0xb700, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:29 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x2010000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:30 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x4b000000) 03:37:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x207200, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:30 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0xff600000) 03:37:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x400000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x6000000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 556.201070][ T27] audit: type=1804 audit(2000000250.669:110): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/42/file0/file0" dev="sda1" ino=17694 res=1 03:37:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r1) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:30 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x400000000000) 03:37:30 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x51a000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x60ffffffffff) 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x770000000000) [ 556.783343][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 556.792221][T21216] FAT-fs (loop0): Filesystem has been set read-only [ 556.799069][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 556.808953][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 556.818214][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:31 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x719000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 556.827425][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 556.838665][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 556.865445][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 556.894532][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 556.919302][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x7fffffffefff) [ 556.954749][T21216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x722000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) ftruncate(r2, 0x8200) dup(0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000140), 0x2) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x6558000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0xb70000000000) 03:37:31 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x770000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:32 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x20720000000000) 03:37:32 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x907100, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:32 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x90710000000000) 03:37:32 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 558.060155][ T27] audit: type=1804 audit(2000000252.519:111): pid=21262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/45/file0/file0" dev="sda1" ino=17687 res=1 03:37:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x8100000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r4, 0xf, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3bffffe6", @ANYRES16=r4, @ANYBLOB="020028bd7000fddbdf250500000005003000000000000800310098000000080032000080000005002a00010000000800310080ffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x20000894}, 0x4040000) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8200) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 558.242265][ T27] audit: type=1804 audit(2000000252.519:112): pid=21268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/45/file0/file0" dev="sda1" ino=17687 res=1 03:37:32 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0xa05100, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0xb70000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:33 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0xa0510000000000) [ 558.844974][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 558.862240][T21289] FAT-fs (loop0): Filesystem has been set read-only [ 558.907870][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 558.947372][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 558.988634][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 559.018993][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 559.038382][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 559.059320][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:33 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x8020020000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:33 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 559.087487][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 559.114990][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 559.129147][T21289] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:33 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x100000000000000) 03:37:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x88a8ffff00000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./bus\x00', 0x124) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x24040041) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = dup(0xffffffffffffffff) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x156) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:34 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x3000000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x200000000000000) 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x4b00000000000000) 03:37:34 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0xffefffffff7f0000) 03:37:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f00000001c0)={0x0, &(0x7f0000000140)="33ed99be637f3b3c709a7381d88bc60fc923125db2eaa66c210b1c861ae52ae63b9bba7ba2ea6a4fe57819dff96cb04f97452b6cd14a75b7f183ce6a022c9f9a07ed", 0x42}) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:34 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:34 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x5000000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0xffffffffff600000) 03:37:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x9effffff00000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:35 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x7000000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 560.758916][ T27] audit: type=1804 audit(2000000255.219:113): pid=21357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/48/file0/file0" dev="sda1" ino=17694 res=1 03:37:35 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) accept4$netrom(r0, &(0x7f0000000080)={{}, [@netrom, @bcast, @bcast, @rose, @default, @default, @rose, @rose]}, &(0x7f0000000140)=0x48, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @mcast2}, 0x1c) r2 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r2, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) recvfrom$inet6(r1, 0x0, 0x4b, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) recvfrom$inet(r4, &(0x7f0000000200)=""/184, 0xb8, 0x40010061, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) 03:37:35 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:35 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0xff600000, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r6, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x3c}}, 0x1) 03:37:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xe40d000000000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:35 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xf0ffffff00000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:36 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0xffffffff, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 561.754835][ T27] audit: type=1804 audit(2000000256.219:114): pid=21397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/49/file0/file0" dev="sda1" ino=17689 res=1 03:37:36 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@mcast2, 0x2a, r3}) r4 = socket$inet(0x2, 0x3, 0x80000000) sendto$inet(r4, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x4, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f70475235c258a9d8968c2eb02f3736bfc55e381b0c260ee6e9e95e850ee57549229da1e65ada97b93f97f728fc1688a18b08437dc298aed28a9ece8377e381d0f452caba87751ad75485abf5de37dfe2c61a349741fbf0d501a81f28f68597f389088eec6494dd145df02f6f948053be5a3de86d0b8dfcca8bf1fb75f645a6c2f5e0f90a7", 0x99}], 0x2800404, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) sendmsg$NL80211_CMD_STOP_AP(r4, 0x0, 0x8048844) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:36 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 562.331906][T21423] FAT-fs (loop0): bogus number of reserved sectors [ 562.368219][T21423] FAT-fs (loop0): Can't find a valid FAT filesystem 03:37:36 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:37 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xf0ffffff00000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:37 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000040)={0x4, 0x3, 0x8, @multicast, 'batadv_slave_0\x00'}) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 562.873288][T21423] FAT-fs (loop0): bogus number of reserved sectors [ 562.996248][T21423] FAT-fs (loop0): Can't find a valid FAT filesystem 03:37:37 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:37 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x1b1001) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) io_uring_enter(r3, 0x400fff, 0x9, 0x2, &(0x7f0000000180)={[0xffff]}, 0x8) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000080)=0x81) r4 = socket$inet(0x2, 0x2, 0x2200000088) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) set_mempolicy(0x1, &(0x7f00000000c0)=0x7fff, 0x9) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000140)=""/14) sendto$inet(r4, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9) 03:37:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x87d15000) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000040)=0x7f) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) r7 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r7, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:37 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:37 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x14200, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xf0, 0x1, 0x23, 0xfff}, {0x5, 0x7f, 0x4, 0xa061}, {0x7f, 0x40, 0x7}]}) 03:37:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xffffffff00000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:38 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xf9fdffff00000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:38 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 563.880821][ T27] audit: type=1804 audit(2000000258.349:115): pid=21476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/51/file0/file0" dev="sda1" ino=17733 res=1 03:37:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) open(&(0x7f0000000180)='./file1\x00', 0x8800, 0x40) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000140)={0x4, 0x4, 0x10001, 0x1}) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:38 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000001240)) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vga_arbiter\x00', 0x2, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=""/4096}, &(0x7f0000001200)=0x78) 03:37:38 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 564.445378][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 564.463771][T21500] FAT-fs (loop0): Filesystem has been set read-only 03:37:38 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2, r4}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) socket$inet(0x2, 0x2, 0x2200000088) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a300, 0x0) sendto$inet(r5, &(0x7f0000000140)="77e201f5d7304461f1a592d401f5045694db33491a67e803ea15b65c3ae5a7b1498336a02bfcd4d9a25a59c4102247981de26c4122b70d14462c26308b21d391f0988938197043871fa5351d7fed", 0x4e, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r6) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) [ 564.506419][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0xfffffffffffff000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 564.561719][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 564.599272][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 564.648748][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 564.713396][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 564.730959][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:39 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x500, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000040)=""/176) r2 = socket$inet6(0xa, 0x80002, 0x88) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r2, 0x0, 0x4b, 0x2, 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000140)={0xa74e, 0xe5e, 0x5, 0xfffffffd, 0x6, 0x8}) [ 564.766127][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 564.785971][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfcfdffff00000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 564.877657][T21500] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:39 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x700, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x88100, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000240), &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000000000959d125500000000000000000000000000800000000000c1536f02ffff000000000000000000000000000000004791dc4978bdce24570000000000000600000000e5e883d9f2c90000000000000000000000000000000000fcffffff0000000000000000000000260000000000000000000000000000000000000000000000000000000006000000fcffffff0000000000000000000000005b00fffffff900"/192]}, 0x138) open(&(0x7f0000000180)='./bus\x00', 0x111000, 0x1b6) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r4 = open(&(0x7f0000000400)='./file1\x00', 0x10000, 0x22) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000540)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e21, @multicast1}], 0x20) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:39 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:40 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:40 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x0, @rand_addr, 0x1000}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) [ 565.545954][ T27] audit: type=1804 audit(2000000260.009:116): pid=21544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/53/file0/file0" dev="sda1" ino=17749 res=1 03:37:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000001800210000000000000400001c000000000000f18e2b17d8ddd548cd00682bc90b0000000000"], 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000001680)=""/190, 0xbe}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/22, 0x16}], 0x7) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x216201, 0x0) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:40 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:40 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) pwrite64(r2, &(0x7f0000000200)="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", 0x1000, 0x1) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:40 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x28000, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r2, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) write$FUSE_POLL(r4, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x6}}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001fc0)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x978ced0fbec5a9b}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000765f4776eaefda76a25f57e6a42c3e62c9d75b127b0e8a44e991a4991cf87e85d58a", @ANYRES16=r8, @ANYBLOB="040028bd7000fddbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xe000) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfdfdffff00000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:40 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:40 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x3, r5}) [ 566.287078][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 566.335926][T21590] FAT-fs (loop0): Filesystem has been set read-only [ 566.386008][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 566.469624][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 566.500712][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 566.515922][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 566.527800][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 566.540461][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 566.555629][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:41 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 566.567293][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 566.606192][T21590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$void(r6, 0xc0045878) r7 = dup(r5) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000000080)=0x1) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x20, 0x8be8, 0x2, 0x3e, 0x1, 0x115, 0x40, 0x334, 0x7, 0x6, 0x38, 0x2, 0x8001, 0x0, 0x3ff}, [{0x6, 0x24, 0x3ff, 0x9, 0x4, 0x0, 0x759, 0x20}], "3d583d8ca6408631e9bf269bcb34094b884e734894f719f1f0ef1ca91e61953b17b92e42ac5958fab4befeba738469733070258e566e5b455cc8ef2c37d4285ca01a61931e5292b73d8f6df1a4acc7ccc02e83a220dfc451865d770187f95ffd5a15d223eaa5c8c394589b29a790b3555c3d3a76616e6745ad476ae4677383ce707555a93b04a67333584a3da733c855719ff2aa50421dce922bec22fc6ddf2ea61c9f297fba22a22b05cc21ce15a9a02da93342c35e7c302fcd9b36fe1dd5468c7d084cb04cdf10d8395d381e60bfa4f430b3c979f883ce", [[], [], []]}, 0x450) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:41 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) userfaultfd(0x80800) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:41 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:41 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:41 executing program 4: r0 = socket$inet6(0xa, 0x4, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x10010000004e20, 0x0, @rand_addr="0000000000000000000000000000e91f", 0xfd}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socket$inet6(0xa, 0xa, 0x8) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x408000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 03:37:41 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xfeffffff00000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 567.396779][T21617] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 567.435745][ T27] audit: type=1804 audit(2000000261.899:117): pid=21626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/55/file0/file0" dev="loop0" ino=298 res=1 [ 567.450842][T21617] FAT-fs (loop0): Filesystem has been set read-only 03:37:42 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) [ 567.543724][T21626] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 567.570895][ T27] audit: type=1800 audit(2000000261.989:118): pid=21617 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="loop0" ino=298 res=0 [ 567.627586][ T27] audit: type=1804 audit(2000000262.079:119): pid=21639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/55/file0/file0" dev="loop0" ino=298 res=1 03:37:42 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x6b, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x191) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 03:37:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000140)=0x7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000100)={r10, 0x5, 0x5, 0x80, 0x18, 0x200000, 0x1, 0x5, 0x10000, 0x4, 0x0, 0xb442}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c000000000000007463f325bae72da6f97bfc923500000000"], 0x1c}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0x0) 03:37:42 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f6f8", 0x16}], 0x280001c, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0xffff, 0x8000}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 568.105186][ T27] audit: type=1804 audit(2000000262.569:120): pid=21666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/56/file0/file0" dev="loop0" ino=301 res=1 03:37:42 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xff00000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:42 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700, r0, &(0x7f0000000080)="15", 0x1}, 0x0]) 03:37:43 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x2}, 0x0]) 03:37:43 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22100) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@empty, @in6=@empty}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r8, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x88c, r8, 0x428, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x40, 0x3, [@NL80211_TXRATE_LEGACY={0x8, 0x1, "758ecaeb"}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, "275cb84ea6331fe88b02fc883d1c8cb4de8360decfb7039f"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8000, 0x4, 0x2aef, 0x9, 0x6, 0x79f1, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, "49ed2b3d4a59899500872cac716676486456a8"}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_IE_ASSOC_RESP={0x685, 0x80, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffd, 0x2}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PROBE_RESP={0x14d, 0x91, "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"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4}, 0x4) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}}}, 0x24}}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000080)={@loopback, r9}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000001000000000000000"], 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 568.734234][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 568.818515][T21677] FAT-fs (loop0): Filesystem has been set read-only 03:37:43 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x4}, 0x0]) [ 568.863447][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 568.926289][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 568.963459][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 569.005572][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 569.024264][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 569.036847][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 569.050443][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:43 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x8a) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="115ac700", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x7d, &(0x7f0000000040)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r7, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x3, 0x5, 0x7, 0x1f, 0xc0, 0x7f}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], 0x76) r9 = dup(r2) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) ioctl$KVM_GET_REGS(r9, 0x8090ae81, &(0x7f0000000040)) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r9, 0x40045730, &(0x7f0000000140)=0x8) 03:37:43 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0xe7f}, 0x0]) [ 569.110630][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 569.172851][T21677] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:43 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xff03000000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r4) fcntl$setstatus(r1, 0x4, 0x4e100) ftruncate(r3, 0x8200) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000480)={0x1, 0xff, 0x6, 0x0, 0x3ff, 0xc6f, 0xfffffffffffffffa, 0x3, 0x346, 0x4, 0x4, 0x5}) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000140)}) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:43 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x20000081}, 0x0]) 03:37:43 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @rand_addr, 0x1000000}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x0, 0x0, 0x0) 03:37:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x20081, 0x0) sendmsg$nl_route(r5, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd2b, 0x25dfdbff, {0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0xff, 0x6, 0x800}, [""]}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:44 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x2}, 0x0]) [ 569.914084][ T27] audit: type=1804 audit(2000000264.379:121): pid=21731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/58/file0/file0" dev="sda1" ino=16801 res=1 03:37:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x40, 0xce, 0x6, 0x6, 0x7, 0x1f, 0x1, 0x0, 0x8, 0x1, 0x80, 0x3c, 0x60, 0xff, 0xf5, 0x80}}) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:44 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x3}, 0x0]) 03:37:44 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x4}, 0x0]) [ 570.506268][ T27] audit: type=1804 audit(2000000264.969:122): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/59/bus" dev="sda1" ino=16849 res=1 03:37:45 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xffff1f0000000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 570.674430][ T27] audit: type=1804 audit(2000000264.999:123): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/59/bus" dev="sda1" ino=16849 res=1 03:37:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:45 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x5}, 0x0]) [ 570.814701][ T27] audit: type=1804 audit(2000000265.019:124): pid=21765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/59/bus" dev="sda1" ino=16849 res=1 03:37:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl(r1, 0x8000, &(0x7f0000000100)="bd924ce08a5257eaec824a51608f12788a964e5618007b986520c3d0cf94a959cf03749d68b609fb0bba41913c3f971cfc215431105295cc1dd84e7f26a7939442f0839a29efc7a80645729d5dd2ec91a7e88f7c5ec3fd4ec8acd65d7bf245bc321968b9cf783e99c4516dcd17a04e3eead6ab6341e89e24adabdb933884cf0c03e57844775b2486ca9b4f6af3174430e67680b7b1e4b32a0b141933f53f2ca08ed20b93eb8500057e848e500ba88cae3fa856bd86c4a8460c1c69c132ba50ba43aa212837c7f9421ec52de8") r3 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r7, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000180021fe12810000008ebaa63be9b480b100000000000000"], 0x1c}}, 0x0) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$FIONREAD(r9, 0x541b, &(0x7f00000024c0)) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f00000000c0)=0x203000, 0x4) 03:37:45 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x7}, 0x0]) 03:37:45 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x8}, 0x0]) [ 571.295433][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 571.360201][T21785] FAT-fs (loop0): Filesystem has been set read-only [ 571.420879][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 571.451911][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 571.495599][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x300}, 0x0]) 03:37:46 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0xffffff7f00000000, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 571.570913][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 571.579731][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 571.660425][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 571.722303][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x500}, 0x0]) [ 571.811569][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 571.891842][T21785] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) open(&(0x7f0000000180)='./file1\x00', 0x8800, 0x40) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000140)={0x4, 0x4, 0x10001, 0x1}) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ftruncate(r4, 0x8200) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 03:37:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@dellink={0x44, 0x11, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x90}, [@IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044001}, 0xc0) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r7, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r8) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f00000024c0)) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[@ANYRESDEC=r8, @ANYRESOCT=r7, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r10, @ANYRESDEC=r0, @ANYPTR, @ANYPTR], @ANYBLOB="62d342f12b505fb7d511b33894a36b52a7a85938033d1dd672bc0554492f0a2b0ba491970dc609a2acfe0ba5a08b53b8603a2296e5c806474954e7841c8805736267f10b2f367940dab8bba511c43f48fcd18b2542b2c40d51c09db249fcc70bf4469512ca78b17b890355ca229de5c330b11c8a0fcbc7dbc2e8bafbadd03082d24e7e61844d20c76b470ae5c9bc2c6b8b4be788fb91d27cad873bf237253e7f9e246db50019ac31f3b4ae9cfdaab5db956562b8cb519991"]], 0x33) 03:37:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x700}, 0x0]) 03:37:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x4, 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0a0000001801210002000000000000001c00"/28], 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:46 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x4000}, 0x0]) 03:37:47 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x60ff}, 0x0]) [ 572.687095][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:47 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 572.782991][T21831] FAT-fs (loop0): Filesystem has been set read-only [ 572.795519][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 572.816085][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 572.827974][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 572.839618][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 572.910707][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 572.939982][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:47 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x7700}, 0x0]) [ 572.998859][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 573.093336][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) [ 573.120771][T21831] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 21) 03:37:47 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:47 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0xb700}, 0x0]) 03:37:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x400000000005ac, 0x402000) r6 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = gettid() tkill(r8, 0x33) fcntl$setownex(r7, 0xf, &(0x7f0000000000)={0x0, r8}) sched_getattr(r8, &(0x7f00000001c0)={0x38}, 0x38, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r6) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='r`\v7', 0x4, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f000095dffc)=0x2) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7d, &(0x7f0000000040)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x100, 0xa26, 0x2, 0x6, 0x7fffffff, 0x80, 0x3, 0x0, r4}, 0x20) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYRESDEC]) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x5d02164ed849dd7c, 0x10000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 03:37:48 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x207200}, 0x0]) 03:37:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r6, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x400007}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000180021c8001c00000000480000000000001f58cdf1000000"], 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:48 executing program 0: r0 = socket(0x10, 0x400000000080803, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d020b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x20000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() tkill(r3, 0x33) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0x1, 0xaa, 0x6, r3}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000000c0)=[{0x3, 0x3, {0x1, 0xf0}, {0x0, 0x1, 0x3}, 0x0, 0x2}, {0x3, 0x2, {0x0, 0x1}, {0x1, 0x1, 0x2}, 0xfd, 0xfd}, {0x1, 0x3, {0x2}, {0x1, 0x1, 0x2}, 0xff, 0xfe}], 0x60) 03:37:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x400000}, 0x0]) 03:37:48 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 574.082565][T21881] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 574.163809][T21881] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 574.211195][T21881] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 574.219335][T21881] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.0'. 03:37:48 executing program 0: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000002c0)=0xffffffff) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ftruncate(r1, 0x1000) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x20080) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80) lseek(r1, 0x0, 0x2) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1, 0xc7}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB="020000000100070000000000040004000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000050000000000200000000000"], 0xb, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x7, 0xfff7, 0x3}) openat$zero(0xffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40080, 0x0) 03:37:48 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x51a000}, 0x0]) 03:37:48 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:49 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x719000}, 0x0]) [ 574.563557][ T27] audit: type=1804 audit(2000000269.029:125): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/64/file0/bus" dev="sda1" ino=16530 res=1 [ 574.713835][ T27] audit: type=1800 audit(2000000269.069:126): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16530 res=0 03:37:49 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x722000}, 0x0]) 03:37:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x3c8000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x140c, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c0004}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000680)=0x1c, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1d0, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd76}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x700000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @rand_addr="0b794da8472ece6836fee74240d67525", 0x71}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf98f}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f3b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x88b}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000006c0)=0xe0ed, 0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x884) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:49 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x770000}, 0x0]) [ 575.182983][ T27] audit: type=1804 audit(2000000269.649:127): pid=21925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/64/file0/bus" dev="sda1" ino=16530 res=1 03:37:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 575.334722][ T27] audit: type=1804 audit(2000000269.649:128): pid=21926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir886148040/syzkaller.hZy3Yl/64/file0/bus" dev="sda1" ino=16530 res=1 03:37:49 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x907100}, 0x0]) 03:37:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000080), {[{{@arp={@multicast1, @rand_addr=0x5, 0x0, 0x0, 0xa, 0x8, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xd, 0x7fff, 0x3, 0x80, 0x1, 0x8, 'bond0\x00', 'ip6gre0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @rand_addr=0x2, 0x2, 0x1}}}, {{@arp={@loopback, @remote, 0xffffffff, 0x6d45c90ea6a4994, 0xe, 0x8, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0x2, 0x3ff, 0x200, 0x0, 0xf00, 'veth1_macvtap\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x44}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="1c9b3e706484", @rand_addr=0x2, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 575.440702][ T27] audit: type=1800 audit(2000000269.649:129): pid=21926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16530 res=0 03:37:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:50 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0xa05100}, 0x0]) 03:37:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c00000000000000000000007a5c64218fd8d3f2a509e3db67df129ba100f221e65a8a63d6a18d79c2df82abfa8c7ae9519c6d7385fd32db58247ac93e079b1147b4b76ad2435f53415d85c3fb46708b1d5acc995de9f99c19d7575f2171fa28767c2929296e35c396068c9bb41f83bb8d87afe1ace57fdeafcfbb3c3511df67f0ee1c85fac26a92b723952e20e9e6568729ffaf363596f5da8e8a6749809c039c50dd73cfe9857215041db8e37c37b0c04185dbb4100b69c524993032e68e062f45d2a2772ac1529591e6cc05b198e111778dfd6fc49138cc0cfe"], 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 03:37:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b91f0b000066b80000008066ba000000000f60f10f01cb660f38803e79776765f3a4e384da090f18c5660f38df2f0f2051", 0x34}], 0xaaaaaaaaaaaab05, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 03:37:50 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0xb70000}, 0x0]) 03:37:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 576.163426][T21970] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 03:37:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000080)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:51 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 577.378071][T21966] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 03:37:51 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x500, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 577.440912][T21987] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 577.500416][T21990] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 03:37:52 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) read(r2, &(0x7f0000000140)=""/45, 0x2d) r3 = gettid() r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r4, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) 03:37:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x1000000}, 0x0]) 03:37:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) write$FUSE_GETXATTR(r6, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x2, {0x3}}, 0x18) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:52 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x600, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x2000000}, 0x0]) 03:37:52 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x700, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:52 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x3000000}, 0x0]) 03:37:53 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0xa00, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:53 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x4000000}, 0x0]) 03:37:53 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000380)=ANY=[@ANYBLOB]}) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0xc050}, 0x4e0c0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000), 0x4) 03:37:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r6, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800210000000000000000001c0000ff030000000000006d"], 0x1c}}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 578.914499][T22058] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:37:53 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x1020, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:53 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x5000000}, 0x0]) 03:37:53 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000380)=ANY=[@ANYBLOB]}) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0xc050}, 0x4e0c0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000), 0x4) 03:37:53 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x7000000}, 0x0]) 03:37:53 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000380)=ANY=[@ANYBLOB]}) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0xc050}, 0x4e0c0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000), 0x4) 03:37:53 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x1040, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:53 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000380)=ANY=[@ANYBLOB]}) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0xc050}, 0x4e0c0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000), 0x4) 03:37:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x8000000}, 0x0]) 03:37:54 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x1041, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0xff600000}, 0x0]) 03:37:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000000100)={0x40, 0x0, &(0x7f0000000080)="e644eb02fafedaf7986b830a0c353d1bf512a3d20073113d966c95176454411f1b83eb0c4bf96432a612bcd7905b6afa31e093339aff7f264d9cd119312c851e7def5c56c62eec1f896b3dc0037d38e1ac09a775b211e8e5deb78e774971ff7efe2b7cf18b1920f3901dd2c1401d623ec43899c682f6", {0x9, 0x7, 0x32314d48, 0x2, 0x7, 0x3, 0xc, 0x800}}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x8000, 0x4, 0x9f, 0xffff8000, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000240)={0xff, 0x3, 0x8000, 0x83b, 0x80000000, 0x8, 0x5, 0x76b7, r9}, &(0x7f0000000280)=0x20) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) splice(r2, 0x0, r4, 0x0, 0x401, 0x0) splice(0xffffffffffffffff, &(0x7f00000002c0)=0x100000000, r6, &(0x7f0000000300)=0x4, 0x6, 0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) 03:37:54 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x60000000, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty={[0x23]}}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xbbd90300, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010003b0e000000000000000000000000f91606bc79c2c7d905bedf12e71d4f93a6bb9bcf645f87986a9834bccc94230c0025d0b9acc07745c830811a37ee46cd32d86a308c80eaa67bfe73a812caebe3c99bdcf5a57ff16e921766be96c6bf835fe8050e4069e3b9558242d43eaf57defb7f2fff6b2659113048c02ce9c6dd7609cde798b97171b36984d00bd958283ae3529717018e22b7f79cb16cd3187b7c6f9c", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000028005000700060000000800040000000000"], 0x44}}, 0x0) 03:37:54 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x1100, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x400000000000}, 0x0]) [ 580.141145][T22115] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 03:37:54 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:54 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x60ffffffffff}, 0x0]) 03:37:54 executing program 0: add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$RTC_UIE_OFF(r3, 0x7004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r4) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = gettid() tkill(r7, 0x33) fcntl$setownex(r6, 0xf, &(0x7f0000000000)={0x0, r7}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000340)={{0x1, 0x3, 0x3, 0x2}, 0x4, 0x20, 0x3, r7, 0x7, 0x9, 'syz0\x00', &(0x7f00000002c0)=['dns_resolver\x00', '$\x91\x00', 'dns_resolver\x00', 'nodevwlan1user\x00', '[\x00', 'big_key\x00', 'wlan0]keyringmd5sumkeyring\x00'], 0x51, [], [0x926b, 0x7, 0x8, 0x1]}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r5) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r8) r9 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x1001, 0x0) keyctl$read(0x3, r9, 0x0, 0x0) 03:37:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:55 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000080)={0x1d, ""/29}) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) 03:37:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x770000000000}, 0x0]) 03:37:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x3f00, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x440200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r7) dup3(r6, r7, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x109000, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r8, 0x4143, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f00000000c0)) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000880)="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", 0xfb}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f00000009c0)="c384a235c07e956b29b267882cfb178ce04249deacee3abfac8f28ae462fb6194d2f3aa45c47f460f355269a3a64677c88bea56e51f0430f966e6d04a53b1b08fc5078250e8552cf4741c9cb0d637bf35b12c12a9b93507ca951ea11d3ec305a2c0f2b4b5784550e15b7a00b6d51ed5bfe", 0x71}, {&(0x7f0000000380)="50a9b3d947bae0a6908561e84649f9d35bab433c0a98372e28", 0x19}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000000)={0x4, 0x5, 0x1}) write$cgroup_int(r1, &(0x7f0000000200), 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 03:37:55 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x7fbc81c94000}, 0x0]) 03:37:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:55 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="03577202fde04ad3f8f584fd3ea6e500"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x9}, &(0x7f00000002c0)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = gettid() tkill(r5, 0x33) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x0, r5}) capset(&(0x7f0000000000)={0x399f1316, r5}, &(0x7f0000000140)={0x0, 0x7ff, 0x0, 0x9, 0x2, 0x62e541ff}) 03:37:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x7fffffffefff}, 0x0]) 03:37:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x4010, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0xb70000000000}, 0x0]) 03:37:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400204) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) 03:37:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x4110, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:56 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x20720000000000}, 0x0]) 03:37:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1}}, 0x90) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x2984fe546310, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x664102, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x80000, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000100)={0x1, 0x89, &(0x7f0000000380)="bce7466242c026b57cfdf125a55e81e148abc6077eb14d2abfbe6498c3c86cb41ba3c4686bb17a2efb60a34407012aac59b9b8535d8640918835730e5ee6ff8209f7b8faaa9b2e760bac78bb69f2d3cb0d19ed454a6175bfd2221e7810410f1a91e66669ebefa38ca241800bac0ddf0aeb0a2cb42c038adfcc324966890756bb37fae6fb82c3cf2fe4"}) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f00000001c0)) 03:37:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000002080500000000000000000000000008050003009f0000000600024089060090000000"], 0x2c}}, 0x20008001) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r3, &(0x7f0000000440)="d6a944dc552840b777ea252917709e4503ac9a9dfb1fb2b10d5d8f60d08c8b000000000000007329bbdf2b90d8399a46cbbcc58fe895613e0a9d9b9265670b8031d30d3ea21d795abf0ebb7441cd5484553c7600"/94, 0x1, 0xc00a0, &(0x7f0000000100)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x23}}, 0x7) recvfrom$inet6(r2, 0x0, 0x4b, 0x2, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000340)=0x6) r7 = dup(r4) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000024c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x1, r8, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r9}}, 0x18) 03:37:57 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x40c981bc7f0000}, 0x0]) 03:37:57 executing program 0: syz_read_part_table(0x0, 0x44, &(0x7f0000000140)=[{&(0x7f00000002c0)="dab52a05379d1bd81d0cdeffdd3a4f7095420907e7b5ea064e110aeda73ce07c665be67776737dd07fc56f12090421b6002bb591828fcd9605f597657a8f5c15a5c3318769be9639a0dd0cf4167ac46253c409e948b193bcb18fadb68fc652614f5c7d75d9cbf354c35d6885f1dc23ab3607a63683b23c66b84544704f027d5a013f2c0fc67ef8696dafae829b4719e530bd249fcc4ab9fbf13eeb53a0a1d56441212b58d5893c4b7108e758751cde18746fd2ffc40b54b8e04e5ec46755554b17e79988f763319d3d589135f0d727665cb04ffa4d9ff48f4fdef85cbb09912c6f79c5c88756d7b56393fc49a2f5f019816ad5e8f486d994b392a65f33275c72ee806af13033f53c3346f7377f4a08719ae7e3cee3c9d1222876f7756b07d41e9ff7a6fb516c241bbdbf7c8c416dc09e4843f3b538666b7a8e02755e9015485000c03979374625ac5090c3b04dc3b9910967ef5729097a4663ab2f8d6efc9fb92ca9772c9d41d0bae363acc1f33e6f73cb884f90d04cc67828dba546d0e9383223134a9bc39a80f220d9bc6e93a06505393f8679f10151be5689719f5fa8ee5b7471998b614bd7122a0eec415ef14df285cd4a9756e520719712d3fcfe7d7f125c28a1064c24bebd3edb13ed7745f3d7ad5d4382bf9dcfc9051dc05a1d2893aabf34574e8f6055b409db", 0x1ea, 0x16}, {&(0x7f0000000040)='RDSK', 0x4}, {&(0x7f0000000080)="9dce3d8b9664b8a96b", 0x9, 0x8}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x7, 0x2, 0x3}}) 03:37:57 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0xff00, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r5) accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x800) splice(r4, 0x0, r5, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:57 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x90710000000000}, 0x0]) [ 582.981851][T22233] loop0: RDSK (1795162112) [ 582.981851][T22233] unable to read partition table [ 583.002249][T22233] loop0: partition table beyond EOD, truncated [ 583.055166][T22233] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) 03:37:57 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0xa0510000000000}, 0x0]) 03:37:57 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0xff03, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:57 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x2300c0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x1, [0x0]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="5b643a3a5d2c301948b34d5e5c9a3a31363a000000"], &(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000180)={{0x0, @name="056fc39674c436f88ebd1bbd2d52cea5889a48edd81c0b96de0d6e11d68b20d6"}, "8c9bb024ac925046c32eb9c7ec3fe239e0d7a970c4661010baa489ec79034d9b"}) syz_open_procfs(0x0, 0x0) 03:37:58 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x100000000000000}, 0x0]) 03:37:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0)) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0x9, 0x4) sendto$inet(r3, &(0x7f0000000040)="13ad9820151e290bccb679eefab0fffa26f161ec23258cdb48df409a4d0288c74447f743458e354e265ba4df599b42e3e7627f97d6adfd30ab7b46a02ca3c044acbe4be9674c708937f8e35907676a0a64cca707e21b2a478d92bcca70aa1628aa8502914abe5bc4e56bd8f8f376cb6d0a237fce", 0x74, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 583.878125][T22270] libceph: resolve '0H³M^\š' (ret=-3): failed [ 583.886212][T22270] libceph: Failed to parse monitor IPs: -3 03:37:58 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000024c0)) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000000000d69d21cccd9a26c2025783b35cde84e108bf069e10f17db946abc13af2df2be268c3e85ab6ae6150b51dc70012dc2912c36682fb43de51474cc762d32f4c13535d24623caa8cfd602105ad6bbfc52d1f32e452518f66acab58c78d1671e2795ceb", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x1) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 03:37:58 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x22080, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000018003d000e000000000000ff9200000000eaf0426b000000"], 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 03:37:58 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x200000000000000}, 0x0]) 03:37:58 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 584.429534][T22285] overlayfs: workdir and upperdir must reside under the same mount 03:37:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x300000000000000}, 0x0]) 03:37:59 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000024c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000024c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000024c0)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000024c0)) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x400000, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xa4, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x60}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008008}, 0x40881) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r10 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r10, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) [ 584.612637][T22292] overlayfs: workdir and upperdir must reside under the same mount 03:37:59 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x1fffff, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) 03:37:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x2, 0x2a, "77b42626f5c4af329497ad5dc549f4121cca2bb761aa416c0dd113afdf396ca05139dd7ca9d30b6669aa"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1f}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 03:37:59 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f0000000000)='T', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000024c0)) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x7d, &(0x7f0000000040)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={r6, 0xf0, "ff6160da0f5ce176ace55cc4064da7d37355293dafe355f92664fb4553b3765a423230076d3ecb0b749aa55549984dbc2dd2056bd6a5c24b2edf03e42cc51737f30dce2e0e912d2177b9a10188f662b87af54a6baad7b76fd1ef5d6cf54d97b9d9f1a380d579c72f0936c7f7e9d255dea91df647d62c41f9a1fdb43494e7a80bc3a8fbc2d942823c0a1e8e6c0ca1c70a4053db58f19b69eb6b2c8c4f664656284acdeac52ebc19852185b6d6aebc065c7a20865e71bdc380cc360144f7e5a37f34837e84b384dbaf40442bde359c34c3fc9d132ae38cafa414e7716f677abf5076a5f95786545aa6ece0e84606b6721f"}, &(0x7f0000000040)=0xf8) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) 03:37:59 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x400000000000000}, 0x0]) 03:37:59 executing program 2: lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x1}, 0x16, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a77, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x3}}, 0x1c}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 585.053811][T22321] IPv6: sit1: Disabled Multicast RS 03:37:59 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) [ 585.263591][ T9540] general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN [ 585.275350][ T9540] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 585.283880][ T9540] CPU: 0 PID: 9540 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200228-syzkaller #0 [ 585.293701][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.303874][ T9540] RIP: 0010:destroy_workqueue+0x2e/0x6b0 [ 585.309515][ T9540] Code: 49 89 fe 41 55 41 54 55 53 48 83 ec 08 e8 8a 6a 26 00 49 8d be 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 05 00 00 49 8b 9e 08 01 00 00 48 85 db 74 19 [ 585.329129][ T9540] RSP: 0018:ffffc90001f37cc8 EFLAGS: 00010206 [ 585.335206][ T9540] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 585.343181][ T9540] RDX: 0000000000000021 RSI: ffffffff814c2af6 RDI: 0000000000000108 [ 585.351158][ T9540] RBP: ffff8880a198e0f0 R08: ffff8880633f6400 R09: fffffbfff185270a 03:37:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x2, 0x2a, "77b42626f5c4af329497ad5dc549f4121cca2bb761aa416c0dd113afdf396ca05139dd7ca9d30b6669aa"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1f}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) [ 585.359133][ T9540] R10: fffffbfff1852709 R11: ffffffff8c29384f R12: ffff8880a198e000 [ 585.367130][ T9540] R13: ffff8880a198e004 R14: 0000000000000000 R15: 0000000000004c01 [ 585.375292][ T9540] FS: 000000000152c940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 585.384222][ T9540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.390819][ T9540] CR2: 000000000076c000 CR3: 00000000633e3000 CR4: 00000000001406f0 [ 585.398803][ T9540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.406888][ T9540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.414857][ T9540] Call Trace: [ 585.418234][ T9540] __loop_clr_fd+0x185/0x1280 [ 585.422934][ T9540] lo_ioctl+0x2b4/0x1460 [ 585.427190][ T9540] ? __loop_clr_fd+0x1280/0x1280 [ 585.432226][ T9540] blkdev_ioctl+0x25b/0x660 [ 585.436748][ T9540] ? blkdev_common_ioctl+0x1770/0x1770 [ 585.442294][ T9540] block_ioctl+0xe9/0x130 [ 585.446651][ T9540] ? blkdev_fallocate+0x3f0/0x3f0 [ 585.451681][ T9540] ksys_ioctl+0x11a/0x180 [ 585.456019][ T9540] __x64_sys_ioctl+0x6f/0xb0 [ 585.460619][ T9540] ? lockdep_hardirqs_on+0x417/0x5d0 [ 585.465910][ T9540] do_syscall_64+0xf6/0x790 [ 585.470427][ T9540] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.476323][ T9540] RIP: 0033:0x45c6b7 [ 585.480222][ T9540] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.499828][ T9540] RSP: 002b:00007ffd30253ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.508244][ T9540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045c6b7 [ 585.516220][ T9540] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 585.524197][ T9540] RBP: 000000000000040b R08: 0000000000000000 R09: 000000000000000a [ 585.532192][ T9540] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 585.540294][ T9540] R13: 00007ffd30253f00 R14: 000000000008ec18 R15: 00007ffd30253f10 [ 585.548282][ T9540] Modules linked in: 03:38:00 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r1, &(0x7f00000000c0)="540ca0fd0940bc2cbd349b5beb001c712691aa7ccd0a00"/32, 0x20, 0x0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) recvfrom$inet6(r0, 0x0, 0x4b, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000024c0)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000080)) r5 = dup(r2) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000024c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0xffffff7f, @remote, 0x1000}, @in={0x2, 0x4e23, @local}], 0x3c) [ 585.566945][ T9540] ---[ end trace 99f15a7617477c2c ]--- [ 585.582972][ T9540] RIP: 0010:destroy_workqueue+0x2e/0x6b0 [ 585.588993][ T9540] Code: 49 89 fe 41 55 41 54 55 53 48 83 ec 08 e8 8a 6a 26 00 49 8d be 08 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e0 05 00 00 49 8b 9e 08 01 00 00 48 85 db 74 19 [ 585.610412][ T9540] RSP: 0018:ffffc90001f37cc8 EFLAGS: 00010206 03:38:00 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") io_setup(0x70f, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="15", 0x1, 0x500000000000000}, 0x0]) [ 585.638550][ T9540] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 585.668934][ T9540] RDX: 0000000000000021 RSI: ffffffff814c2af6 RDI: 0000000000000108 [ 585.695022][ T9540] RBP: ffff8880a198e0f0 R08: ffff8880633f6400 R09: fffffbfff185270a [ 585.719845][ T9540] R10: fffffbfff1852709 R11: ffffffff8c29384f R12: ffff8880a198e000 [ 585.746979][ T9540] R13: ffff8880a198e004 R14: 0000000000000000 R15: 0000000000004c01 [ 585.757470][ T9540] FS: 000000000152c940(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 585.777089][ T9540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.792692][ T9540] CR2: 0000000001e71978 CR3: 00000000633e3000 CR4: 00000000001406f0 [ 585.808610][ T9540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 585.825637][ T9540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 585.842627][ T9540] Kernel panic - not syncing: Fatal exception [ 585.850435][ T9540] Kernel Offset: disabled [ 585.854780][ T9540] Rebooting in 86400 seconds..