0e5b6cf631298394e80a86ab8474622629e3df191b565ff7ca1b175e48458ab1c9be6644a3c0607c74c7c3d6117289ad57b2ba60af3eba30038a230ff3d84300d55c0c71c3b709f03df45f5ddc34a4f86f39305b03001f558faf57e6179262fa0baa098f81274abb783d65c320c552fe9fa3480e4ff96a14a53089520a893102fc6c782475bb206739089ef6c00daf321a010d693f84c707d66a9b66563016d4069c325df47ce379b98af950be7413d152a7df186db143c77c2b80081f710ae0c0e0b506ba77e52c84d720c0c0ab70a9ef76047d5c7c33a66efd775741b42b5570eea6d316bca68e9abd56051e622ef39152438f1dd486db2946d940f1305192f8d87944dd8f4aebd4fa237c41d0a3aeb6ba1ed6fc0d84bc5643c0007d7c7737ee0a6868c1a87334cf885821521442c6454366502482d48693320afb6217185bc4490fa555846ecc2b9f0eaf5416e3eafb72689e5cb971401d34c899478d2803812703f56ed59ae21573b145be0071c7d6ea5618de1b2a0214be6753a12f435e208f19bee2e1c8a1c00215600751a78209116c89a777455d4e84dd19f538e3d5cbd55f5528d83f959ec6f096beae4ac0dac1298c7e05aaa00003cfb19d37fdb20fcd069319cc02d08246bd04063f5c144b525904c99e9da1a1237fec6f01b2211667db196118bb69876a04d69bc326e863b6bb13a5026642513f605c60a1580b028563f413f7e7fffe4cea8b74b9e0a456e096cd501044699afbf46b16385d93e2dcb50156289ef9e365de33f74464c8f720014ebd6fbde50efd4c16e0c6652be11c72fb138843ee69765276b48bb30a3dfc35fbbfe609da81dff57cf8f958e236586899c7e04e695aa3d05d1db9b351f750302f4bbecd54fd2cc1f98b38c24b863d3f09d94e979ed9d89488d63adcab10eaffc8fd9d11dc3be30209484a627cee15833040b1778351add2a94e9a21530f0c306255383dbf44f6bd183911a8467ad450aab3c8b122dd75c6f076e0268d6557cb468c83e0b8011ba8b78d37425880c376decfe9f5c6ba302a4ffa0e3"}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0x0, &(0x7f00000003c0)="9d450c37", 0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x202000, 0x0) getpeername$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/219, 0xdb) 00:18:54 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xfffffffd, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0xff, 0x209e21, 0x3, 0x1, 0x1}, 0x3c) r1 = dup2(r0, r0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="74135353cd930cbbcc51696e24d19f75a017d89defdf75acd2ff82299d5b79e0317fb53fe489265025a790fb9f67e24ab90df9a537d2532c743a7061eabd2a741037b0ad1dec4a55c474daca81f9c453f54a74c9ca4ad1ab45dc984e1916c5fc901c7cef38cdd454e241dddff078efc9d538cbdc53ac0e4d3f69fee8690f42090455d5c594d6b4a9266102c255def46b3efe9b1f184b82a472a3666ada27a12f19f37e01a4332f63c6b18aae97f30c0fd2eb5ddcad5e144c9782fca4e570c8") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000400), &(0x7f0000000540), 0x3}, 0x20) 00:18:55 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:55 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:18:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:55 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff3777077ea3db08010000000000000100003c019bf6357800000000001500020000000080"], 0x0) 00:18:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:55 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x6, 0x5, 0x9, 0xffffffffffffceed, 0x7ff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000000280)}], 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7fffffff}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e23, @loopback}}, 0x9, 0x40, 0x1, 0xaeb, 0x4f}, 0x98) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000580)='ip6_vti1\x00') 00:18:55 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:55 executing program 0: socketpair(0x0, 0xa, 0x100, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000780)={0x0, 0xffffffff}, &(0x7f00000007c0)=0x8) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2001) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000800)={r1, 0x658}, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) openat$cgroup_type(r2, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0xc010, 0xffffffffffffffff, 0x1}, &(0x7f0000000040)=0x10) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x100000000000, 0x405) 00:18:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:55 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:55 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000180)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 00:18:56 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:18:56 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000200)=0x401) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="fe5bcc15add63afde2b786576521c17489e9e86ab36b92e56ab041dff7bbd6f40fce9dfb71fc53766789a72a7cbe4f2c30beb17888d1c728e6414b9eac4634e53b0f06360d4033d904000000149b61a9588b3d8f524cd980fbb82f5f6e8600ddb4a3d437fcc989bcf1ec74c5c01cc44ff494e780e2722000", 0x78}], 0x1}], 0x1, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x20c140, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000180)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:18:56 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x2, &(0x7f0000000100), 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100, 0x8000) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={0x77359400}, 0x10) 00:18:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7fff, 0x6addae3c4c6484a7) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x11, &(0x7f00000002c0)="84d0d3202d01198bf7d9b4c1d4cc225c1a"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005000000000000000000000000008140c6f7966cbb0b00000000000000000000000000000000000000000000000000000000000000000000000000008700"/112], 0x78) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$netrom(r1, &(0x7f0000000140)={{0x3, @netrom}, [@null, @netrom, @netrom, @netrom, @rose, @rose, @netrom, @bcast]}, &(0x7f00000001c0)=0x48) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000001580)) r2 = getpgrp(0x0) ioprio_get$pid(0x1, r2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}}}, &(0x7f0000001480)=0xe8) syz_mount_image$btrfs(&(0x7f0000000280)='btrfs\x00', &(0x7f0000000300)='./file0\x00', 0x1, 0x1, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000, 0xec}], 0x200000, &(0x7f00000015c0)=ANY=[@ANYBLOB="737562766f6c69643d3078303030303030303030303030303030382c73706163655f63616368652c636f6d70726573732d666f7263653d7a7374642c696e6f64655f63616368652c73706163655f63616368653d76322c666c7573686f6e636f6d6d69742c736d61636b6673726f6f743d2f6465762f76637323002c6f626a5f757365723d5d2f657468306d643573756d2c7365636c6162656c2c666f776e65723df1b9f1c5e7cc7701827c0aa5608dd1d8c1dc1c12a4566dd08d5293d73af7083a30914b45758052a2a9722e3a19c305446bf3070fee8c6bccf6b1a06b523629d1", @ANYRESDEC=r3, @ANYBLOB=',\x00']) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x3, 0x40000000000000ff}) prctl$PR_GET_TSC(0x19, &(0x7f00000014c0)) 00:18:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:56 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e26, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:56 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, 0x6, {0x85e8}}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab", 0x1) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 00:18:56 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e27, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:57 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040)=""/94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000090000040200000000006cf8078d2d6855ab8c3f5ab465587d4ff839a2695d11724399ef7d7b7fbdaf6c26f99f5223248ab1f62daa454fd58a83a0f02fd78bdb4b179f07371280a8429d20832e934b830052988ed5037103e1c1e1e0f004d00d4fbb5bda000bbed1df121dde2055f03c34b227590f6e92aef23231fe264966063417a25d7e51342e354b3b00"/181], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x10, &(0x7f0000000000)={0x0}}, 0xa) 00:18:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:57 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x8, "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", 0x1000}, 0x1006) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setgroups(0x582, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x401) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xa) 00:18:57 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:18:57 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e29, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd33, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03000100000000020000010000000000002300000002bc0018000000006962000000004000000000000000000000000000020000000000000000000000000000200000000000000000000000000000000000000000000000009d68e827a533000000000000000000"], 0x68}}, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xbc, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x3, @mcast2, 0x6}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x1ff}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x17}, 0xffffffff80000000}, @in6={0xa, 0x4e22, 0x8, @local, 0x532d}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast1}, 0x7}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={r2}, &(0x7f00000003c0)=0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x1ff) 00:18:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:57 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e2a, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:57 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@security={'security\x00', 0xe, 0x4, 0x408, 0x138, 0x138, 0x278, 0x278, 0x278, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@ipv4={[], [], @multicast1}, @local, [0xffffffff], [0xff, 0x0, 0xffffff00], 'veth1_to_bond\x00', 'hwsim0\x00', {0xff}, {}, 0x0, 0x80}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) unlink(&(0x7f00000003c0)='./bus\x00') setsockopt$inet6_opts(r2, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000140), 0x4) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x6}, 0x28, 0x2) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10c22009}, 0xc, &(0x7f0000000280)={0x0}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000240)='caif0\x00'}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="e9fdffff37000000000006acf05af8910000000000000000", @ANYRES32=0x0, @ANYBLOB="99ff76626f786e6574305b"], 0x27) ftruncate(r3, 0x80003) sendfile(r2, r3, 0x0, 0x8000fffffffe) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./bus\x00', 0x0, 0x8}, 0x10) 00:18:57 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e2b, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0xffffffffffffffff) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e50, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40180, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}]}, 0x44}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mremap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf003000, 0x7fffdf003000, 0x0, &(0x7f0000ffc000/0x1000)=nil) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000200)={0x100000001, 0x9, 0x4, 0x5}, 0x6) 00:18:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101440, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000100)=""/4096) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vcs\x00', 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000014c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000001200)=""/66) connect(r1, &(0x7f0000001180)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @empty, 0x10000}}, 0x80) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) 00:18:58 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:18:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e54, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0xffffffffffffffff) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101440, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000100)=""/4096) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vcs\x00', 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000014c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000001200)=""/66) connect(r1, &(0x7f0000001180)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @empty, 0x10000}}, 0x80) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) 00:18:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x5, 0x11, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_ident={0x2, 0xb, 0xffff, 0x0, 0x6}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e23}, @sadb_address={0x5, 0x17, 0x7f, 0xa0, 0x0, @in6={0xa, 0x4e23, 0xffffffffffffffff, @loopback, 0x1}}, @sadb_address={0x3, 0x7, 0x3b, 0x80, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d2, 0x8000, 0xff, 0x47, 0x4, 0x1}]}, 0x88}}, 0x40000) connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0x1c}, 0xff}}, 0x24) write$P9_RWALK(r0, &(0x7f00000001c0)={0x3d, 0x6f, 0x1, {0x4, [{0xa8, 0x3, 0x6}, {0x8, 0x1, 0x6}, {0x10, 0x0, 0x7}, {0x44, 0x3, 0x2}]}}, 0x3d) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1ec, r1, 0x500, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x65}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xef3c}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9b, @dev={0xfe, 0x80, [], 0x28}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbbb5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000500)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000540)={{0x100, 0x3, 0x2, 0x5, 0x6, 0x5}, 0xc7, 0x7ff, 0x3ff, 0x3, 0x200, "bce37b5e2f9ae173ca5debfa5e303b37c6ff336aff4f4a879a2353fc3f4341f28f7886d5fa4efe3c5be017338d6c8a71f6a5c64c64cdfb8aec4bb38a5ce3d325412d890ace33a0d113d616115d8f75c528af921c9c1d3c0d7b46327f82be644b91b1540089b2ee57186229abfbf8d76bbb87e4fe12bc944d6f0a4de0ce639456"}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000600), 0x4) connect$llc(r0, &(0x7f0000000640)={0x1a, 0x13, 0x0, 0x79, 0x6, 0x81d, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000680)) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000006c0)=0xf4240) recvmsg(r0, &(0x7f0000000b40)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000880)=""/189, 0xbd}, {&(0x7f0000000940)=""/65, 0x41}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x4, &(0x7f0000000b00)=""/36, 0x24}, 0x2021) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000b80)=r0, 0x4) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000c00)={0x6, 0xf, 0x4, 0x400000, {r2, r3/1000+30000}, {0x3, 0x1, 0xffffffffffff92ee, 0x5, 0x2, 0x56e, "112a02aa"}, 0x41af1d1d, 0x2, @offset=0x24, 0x4}) getsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000d00)=0x1) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000d40)={0x1, [0x7fff]}, 0x6) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000d80)='\x00') ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001400)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000001500)=0xe8) lstat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000dc0)='f2fs\x00', &(0x7f0000000e00)='./file0\x00', 0x8, 0x6, &(0x7f0000001340)=[{&(0x7f0000000e40)="9b74280b72a7828085f0018a8fdb54b329203f8779a317253277ffa36e8f40e3550906c4f631018b874c06fd318fda3343573732415d079b19273e4e5913b0851f7f47506bf907a0a45246abe5355ca75b64fbebaea2514998831136d3e1ecc4c2b4eb23bf27b810c7929a29c41234e7efa01bef4a45df58bb3a18594a66a68e1f5faef95b39a337ce8bf32f6eb2eeed39e52903e6e440042a234fe16e556012b81cf5dcde2a7ac0cdd4534014b6efe82494bb3e8cf52939cb7e8d5a34b10e13f6204fdb", 0xc4, 0x7fff}, {&(0x7f0000000f40)="189c737885754dbe0a10a8057511810e167f1ae16e36df51052caed2e0fa1f4a76648d9ce9d2681f436f8ee40db4f4bc08b8139aa14698d1a073eb1c5008aa891c2b05d5f8039dd19a56159d220d3e980a218632abdfa3d30a556c25bc2aeefa86f16a8f5001dd2fb1b8e5899a089b4ba19a281411bbcb88f13da205630288ed747d6b30af83af74c20227e2a10b98182d1f820ebfdbbfc87bf8ebc5b21fd434b7eb70d63d5c8a2e2e57afbd200c3227c72f2a5603b9184d73b9856b64c3ead352757b05d9a6eb96a79be78b32", 0xcd, 0x80000000}, {&(0x7f0000001040)="c8cc3834ef28427ee2d71b7f27e270e76bfee34ff1aa59b2739b0a0b0f00abdb2c02e641b321d4f1e713a3a7c1196cc2ee96c9fbcc67d0bb6cd534c64c1b70e81c8fb2414b7023914539327ace17cadd9e53e66204bffce2a4c0337346c987e12b90d18bd7d4241a5fe2577e06a3a567b4cef0468883ffaa56e9109a514ae78048af4736ccd8d3a9899a5fef507acf0a5557fa063a1845c9", 0x98, 0xaae}, {&(0x7f0000001100)="f74a61cd83cc2408abb1df8bd9be1a11ea03be780f1a0bdddb3919df58bbf557f7438818e42c9a736ce048a24d475463e0a12b63c5568d63759a4079dc0252bc2fbadefcc41d3ec201fb72828e36fa75550fd3aca9b21cfe83d895fa4d2a12e49e473f3ad1ded9eeb247cbaf6666466a1d82cd72397851c4c3e041dbce93a792b6f4178345837686d0f2fbb01b9b2672e13efded3a2d3b4db932c720c8651d273a00ca585a0029", 0xa7, 0x9}, {&(0x7f00000011c0)="ce01d0b66b6ebf04ff9b9a4533eb0ca6bbc9cda630d8133df75aaf1b97da84c56e21b90a5755617e4e10f06b7526f380f6dfe88a4bceb5c4776e858412d6bf343e53c0f03b41ea55b79f1a7ad1beb0af5b5a84a8d91b126513bbd7fd8b37a3d41f9116862e6e8277892dc0be4c81d2728fba85d5", 0x74}, {&(0x7f0000001240)="f68d90ad0ce0aa2522c4a494f312f481f01a5eb84cc6e78db3511455df29917bba310375154379055f69df5d2910843d5abeecb3f81436af329f907cee09457efd9ed4e6c629e04569f6060e34558b8a262fc26209487f910eac08af33b67f3758c2d5ea65b2378f78aa3eb5fb49ff6a33e99a2b67aa61b025018ec33437a1c6b3fcc5c3218bfc4c1356c98e0d8d7bca0c410735bfdfadeca2dc1a1ac127a3d278a49f18be518a8a86d90266be1c42b6b1c754626d2c2b474991f1b8b285e1e9e216bfdab4f11c892299ac34d29f83bedcc4f1940b605fd22f8eea1ae9919b9b4f0241", 0xe3, 0x1}], 0x100000, &(0x7f0000001600)={[{@noinline_xattr='noinline_xattr'}, {@inline_dentry='inline_dentry'}, {@flush_merge='flush_merge'}, {@data_flush='data_flush'}, {@disable_roll_forward='disable_roll_forward'}, {@noflush_merge='noflush_merge'}], [{@euid_lt={'euid<', r4}}, {@euid_lt={'euid<', r5}}]}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000017c0)={r0, r0, 0x80000000, 0xca, &(0x7f00000016c0)="96ce6100735495186ede0d0ddfdd62e756d7a2d3df890f638d6c0dd51f7222a3f0ad93818914f18fc8627655cd3bac39287dd73565a93ea9ff145414cd238567582f85ccd8989a0c035c5dda250208105abdf4e111765f8a023219263e669ffb5c9cf536790b5a933041960d010ca9f4626f37dedc23a9935f5b665983964b2380d24d47070a50bfa50c4b1cb2425dce3403e3f88ddd94a800792064d2cb282f4dd49e415619cfe8ee617b13f511d563c6f84cd787ef1efb7443bcd1d7f24a4c21ed5671de66290a4cdc", 0xf0, 0x400, 0x80000001, 0xf3, 0x10001, 0x3, 0xed4e, 'syz1\x00'}) fchdir(r0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000018c0)={&(0x7f0000001880)=[0x3, 0x80000001], 0x2, 0x3, 0x7, 0x5, 0x2, 0x1, {0x80000001, 0x5, 0x40, 0x1, 0x8, 0x1, 0xffffffffffffaa61, 0x7, 0x4175, 0x86, 0xfffffffffffffffe, 0x1, 0x9, 0x287f, "d96bc7764f113dc10b8b5b115a7f5b21990144cccd724ba1585f727cd06b5baf"}}) r6 = getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001940)=0x0) kcmp(r6, r7, 0x3, r0, r0) [ 232.671610][T12909] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 232.679477][T12909] FAT-fs (loop5): Filesystem has been set read-only 00:18:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0xb10d, 0x0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0xffffffffffffffff) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101440, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000100)=""/4096) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vcs\x00', 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000014c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000001200)=""/66) connect(r1, &(0x7f0000001180)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @empty, 0x10000}}, 0x80) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) 00:18:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:58 executing program 0: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @local}, &(0x7f00000000c0)=0xc) 00:18:59 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:59 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:18:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/198, 0x431}], 0x1) 00:18:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:59 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:59 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x3f, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000140)=""/63}, &(0x7f0000000200)=0x78) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto(r0, &(0x7f0000000040)="0400", 0x2, 0x8002, 0x0, 0x0) sendto$unix(r0, &(0x7f00000017c0)="d8c2", 0x1d, 0x0, 0x0, 0x0) 00:18:59 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:18:59 executing program 3: r0 = mq_open(&(0x7f0000000c40)='$nodevem1))\xffvmnet1mime_type\x00', 0x2000045, 0xfffffffffffffffd, 0x0) clock_gettime(0xb, &(0x7f0000000ac0)) mq_timedsend(r0, &(0x7f0000000b80)="d039d4d6b0383ec1f85bb1ea5a9a092ebe0df8376a00"/35, 0xfffffffffffffe51, 0x1, 0x0) futex(&(0x7f00000006c0), 0x8c, 0x2, &(0x7f0000000a40)={0x0, 0x989680}, &(0x7f0000000a80), 0xd037) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f0000000100)=""/35, 0x23}], 0x5, &(0x7f0000000440)=""/201, 0xc9}, 0x9}, {{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/100, 0x64}], 0x100000000000004e, &(0x7f0000000880)=""/163, 0xa3}, 0x1}], 0x2, 0x2000, &(0x7f00000009c0)={0x77359400}) r2 = creat(&(0x7f0000000b00)='./file0\x00', 0xb0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) write$FUSE_OPEN(r2, &(0x7f0000000b40)={0x20, 0xfe105467510e380e, 0x2, {0x0, 0x1}}, 0x20) ioctl$TIOCCBRK(r2, 0x5428) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000a00), 0x10) mq_notify(r0, &(0x7f0000000040)={0x0, 0x2b}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 00:18:59 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) ioctl$TIOCCONS(r0, 0x541d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x0, 0x7039, 0x9, r1}, &(0x7f0000000100)=0x10) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @ctrl}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) write$P9_RAUTH(r0, &(0x7f0000000200)={0x14, 0x67, 0x1, {0x42, 0x3, 0x1}}, 0x14) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000240)=0x3, 0x4) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r1, 0xa11f}, &(0x7f0000000340)=0x8) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000380)={0x2fb, 0x100000000, 0x0, 0x4, 0x2}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r1, 0x8}, 0x8) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000480)=0x44) prctl$PR_MCE_KILL_GET(0x22) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @local, @dev}, &(0x7f0000000540)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x4e21, 0x7ff, 0x4e20, 0x0, 0x2, 0x20, 0x80, 0x2d, r2, r3}, {0xeff, 0x3, 0x6, 0xaf1, 0x9, 0x8, 0xdcc, 0x8}, {0x66fe6bee, 0x1, 0xd5b1, 0x2}, 0x4, 0x6e6bb9, 0x1, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d3, 0xff}, 0xa, @in=@local, 0x0, 0x4, 0x0, 0x91d0035, 0xff, 0x0, 0x3}}, 0xe8) fsetxattr$security_selinux(r0, &(0x7f0000000700)='security.selinux\x00', &(0x7f0000000740)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780)={0x77359400}, 0x10) timer_create(0x3, &(0x7f0000000880)={0x0, 0x35, 0x0, @thr={&(0x7f00000007c0)="91aaa514cd1ecba737f47b6286a0f067d9dd3b6cfa6b10d7a5e65e280ef2605f9e8ae752e4ec836b175f6ea9251c83975b20cd719250bf320faa271313219c863df1ab2a969b49079952ac37b6ef46622dab149f9ca71fa849b5a0dfb4c4ea1659f022da720b5f261bf65fc207cf4d7870d47cbd5242b8f824", &(0x7f0000000840)="63351991901a6f121422f01a495a3cc849991783eda6276372205441745490d2c3e7ebdb45b63e"}}, &(0x7f00000008c0)=0x0) timer_getoverrun(r4) fstatfs(r0, &(0x7f0000000900)=""/113) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000980)={r1, 0x100, 0xe94, 0xfffffffffffffff9}, &(0x7f00000009c0)=0x10) socket$vsock_dgram(0x28, 0x2, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000a00)={0xff, 0x3f}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a40)='SEG6\x00') ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000a80)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000ac0)) 00:18:59 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:59 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:18:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000014c0)=""/222, 0xde) [ 233.990707][T13027] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 234.059611][T13027] FAT-fs (loop5): Filesystem has been set read-only [ 234.077224][T13027] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 234.098842][T13027] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:00 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000000000002d000000000000007f000000000000004b24f8a061f7fd7c275e3db7"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x275, &(0x7f0000000200)=""/207}, 0x48) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x20601, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000001c0)=0x8) 00:19:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 234.117078][T13027] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 234.131222][T13026] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xa, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:00 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000053028119615b49cd"], 0x18}], 0x1, 0x0) 00:19:00 executing program 0: r0 = socket(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x1000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16]}, 0x7a) 00:19:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xe, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:00 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:00 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="d8000008", @ANYRES16=r3, @ANYBLOB="000000000084953947e9354a3300080002000400040008000600040002001c00020007dd01000000000004000400080002000000000004000400700004000c00070008000300000000003c00070008000400040000000000010000000000080001000000000008000100000000000800010004000000080002000000000008000400040000000c00010073797a31000000000c00210073797a30000000000c00010073797a3000000002280007000c00030000000000000000000c00040000000000000000000c0804000000000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000001c0)=0x10d002) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:00 executing program 3: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'irlan0\x00', 0x3}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x2) write$evdev(r1, &(0x7f0000000100)=[{{}, 0x14, 0x4, 0x2}], 0x18) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000180)=@sco={0x1f, {0xff, 0xfffffffffffffffb, 0x1, 0x7223, 0xd8, 0x2a}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="9cedabc6a2a638e2fc26de8c408574c75d5fdae5136b0ea9e17ca474f90d5e6327ce3655b67801c3937efae36ea462a8c2e34538a8eb5ae6a7c64403cec24c298d59a64fd957ea67a61d941291c2268d1b514f98be7b62b08d01def52a2d26d8a3be074273c205168a0db36e9ca666e77c62dccea07e1662f6b687a89312ebebf2b2008a917c4ce23ac297dd468b8f713cdd85e91989364f55e9515c63581f19400eb4706f4eaa73b8f311706aa1b34101f19849c8a7eb3fb2991f5a9a20711600cfcaa0de3d2bd13b2a3cdc22ae01705aad73f31a5420f62e494c68218faa0f4ba98742a6f8944445075dcdac8b12", 0xef}, {&(0x7f0000000300)="c25008064dafaa7ca73ce4288bbaf0bd56a1a515fab800ef8cc4d11755637bc38e36cc0570e3dece2ab5c4c823b5a559c84016914988a5b9d6943ce8d072d44d30c4544e6e6983c37f3952033f52fde9f8526640f717022e6737259e64c590972975957107ef57ddec3b2130153a8cf3818a603e24092416d019d4278ff2532a6c74f55fb81e6d4feafd9e77aa0a1d3d9a039b88674dcca7199a9943efc74cdc4d881cd0508bb7c5f787f1e328d140e3bf0c68b1b95e8598bbef7e3959e5077f52a5f11482bddacdfcc9970ec2eca8d6d1f02c639dd64532de7db7fd0b50d5238b883f28a2a4bb5d3fd31a37b421bf803f48cc", 0xf3}, {}], 0x3}, 0x8000) 00:19:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x13, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000100)=""/192, &(0x7f0000000080)=0xc0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x200000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 00:19:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x58, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:01 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:01 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:01 executing program 0: r0 = socket(0x10, 0x807, 0x1ff) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2b, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r3, 0xffffffffffffff8a}, &(0x7f0000000140)=0x8) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x7, &(0x7f0000000040), 0x4) 00:19:01 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x5c, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2405, 0x0) 00:19:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) ftruncate(r1, 0xe0ff) 00:19:01 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x60, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:01 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x25, 0x2) renameat2(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x40000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x307}, "9031ecce3ded0cd3", "ddec243b20a047a7df8a8e7e829f1c91", "b689116a", "b28739ec19cae226"}, 0x28) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x1d000080, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0), 0x4) 00:19:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 235.553458][T13141] cgroup: fork rejected by pids controller in /syz1 00:19:01 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:01 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:01 executing program 3: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x7, 0x5, 0x6, 0x6}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001740)='TIPC\x00') r2 = syz_open_dev$media(&(0x7f0000001300)='/dev/media#\x00', 0x4, 0x800) sendmsg$nl_crypto(r2, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000002}, 0xfffffffffffffecb, &(0x7f0000001480)={&(0x7f0000001380)=ANY=[@ANYBLOB="e000000015000055022dbd7000fcdbdf25647262675f6e6f70725f686d61635f736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000400"/224], 0xffffffffffffff90}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000012c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8009ca00}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r1, 0x208, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xffffffffffffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8001) syz_genetlink_get_family_id$tipc(&(0x7f0000001600)='TIPC\x00') r3 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000611121bee7e01f7ec7d60000000000000000b38c2154a6ac679adfb0368d00b33b5ecb1ccd54041535692cc195f7739967d894f66ee80685c98bca27338bb7c08a"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001540)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000015c0)={0x1, 0xfffffffffffffdaa, 0xfa00, {&(0x7f0000001500), r4}}, 0x18) 00:19:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:01 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x1f4, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:01 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:01 executing program 3: r0 = socket$kcm(0x2b, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x8000, 0x0}, 0x6}, {0xa, 0x4e23, 0x71, @local, 0x2}, 0xee, [0x3, 0x1, 0x9, 0x0, 0x7, 0x100000000, 0x800, 0xed]}, 0x5c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0xefb5) fgetxattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="6f73782e2f70726f632f7379732f6e65742f697076342f76732f6c626c635f65787069726174696f6e00c43dc1498fb0d2eb6569e4a4a3e68ec31039104ba5b25a50e8faa495986458efa73270ae496cb300900e2cda3087f575"], &(0x7f0000000200)=""/115, 0x73) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e00000026008163e44cc91b4dd65b2f0880c37823072a556d1c958c00"/46, 0x2e}], 0x1}, 0x0) 00:19:01 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x900, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000180)) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x20000) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000100)={0x5, 0x800, 0x8269, 0x200}) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000003c0)=""/208) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 236.022785][T13292] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:02 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:02 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x300, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:02 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:02 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r1}, &(0x7f0000000480)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000140)={'crct10dif\x00'}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x50000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0x4}) exit(0x9357) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={r3, r4}) 00:19:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r1) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffff7f, 0xf5, 0x5}}, 0xa) 00:19:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:02 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x3e8, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:02 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, "1bf466911bf6d0b9bd4a859108ffb3f4ec484331c1a4583993446164752c33e4e6c03bff471417c8ccf41a260925143d58e2dca2cf651252ffa11d85a1ab9ee711401fbf4baf6bb72ed94e9e4e0dff5f4f423372b6aeb0ad9c3bf868493d7ca4cc0ef07cd0a1156b0d2e4ddddb2acfae5c42db221febb71584072011d58fc70e25c8b41f559674a08397d80243932df98571f430f1801330b4f43e119270a8d1c48a983ea86f0db8d67cd90d840be0619da818aaeae91ad69e507fd37226037cc842613a2570ae408721929b31b878152f86efbfbeefb12517c87d4f3ac60f13502520dd330974e664cd87f96e281ce2f89af545275fb6a181a38d45c705161038fdaf1198648bc591ef4b50ed09e4bbb819fd2562b1e69b2c80418d0d319202adf986638543c48d12e9ae0228553001c68f8024daddc9951a3ea431366b08fa218dd58c9f6990d7aaca518a9c6a62326cfb00ff80002e9f4e94bf7b0bfd0c79f1847066a83c1d5accd168150031b16f26ba8faf1dae13752eb1b11ebfe23352dea9ea64617ae4be2946675984ec1456fa11d4785d17df035155823d127da3789f37cc4419eb25a9c9184c2db9c5e1561b313e98cfb79be8e95d724f00b08215cb824dbb9178ad75f99adba7d9e863d5a1140270b40d94f31b53c00bec6e9016820347f170e1f70efe014a6a3fe56a831332180511dcc4e8adf5690a99d5ef336867de78eb497e9bec7bc5557f557941b0d0c445926f65306e5862b2f6f7ad090b549a021ec0dbd03b4dd5cc1f4bac8fcc921c44619b5545170f627f4a4a7214404108519819644c2fd4943ba9b2e7a667edd5971d64250d00be06894c20107d26d28d1bf651baecead425c87bbef2f8c135b6310a0175b09f2e35de423415982f61bad6c43576e06948d8ba44d3208b35ba4cb9c973cce46047cc090523d3259619d02028c8ce0ddca0f4d14a12ddf3bbd2aa83f3ca99c1e5c181966b366aad650bae0e39e422a816363a4e79cf5fdf58a6a46ca7498d327d19acb136a0f7889e5533580629ae178af355049e19681688763438728412ab033d13dddbe7b72e0dab71c1741f959a658603ee1679378cdc8012c861051f1ceb6b4e377b83d14184120aeab540b0ed5101f4946a6e0cdd8ffa1458f1cfe6f298b99c0f932e5ffcb4ed6f504dd681b9129f08d1a7662c6bae368630b14ebbe6f0bd1a5c41bfc31fa317fe6dfca82ab7fc4b0ef39330dbc99724f7efccddece66c2b6133f90dc1a0f248983c75cf8e88994e305e337235dc27b08694b48dca901e0e790e254dcd41190a47eb235a4b76aeb1d1687367563f219619512056681da29c1cffce578cce772b3853bf102565924dd782c71da59068f4bacbbc4d5a505ac855f930ad223e88430a05e68c08b778e473309e4af6f19a72cd916fe62c006d0d3168814191074e54bb4d23972edcc4506acda2bc3ed2604b4440780f087ef7d8d6039f988f030f293ba4410f7b19b7c7132720df5873558782bff74934cb40120ce003fb858fe0d7ec853ae8dee5f4e323dcf5fdb1732ecdf2812c12bf2fae7ca9a2a6969a94d38dae71792feaa761b51399b2bb0173ef685c90dd62d999105efd04eb403ae71d312616afa7ad283342f8807ea59c8e320f8cfad7ca14a698fccd7ba8a586761d2f011fae18dafa65b34a22c10df3352eeea2655048674b35b43a1d8984e57d12aeb210a2da4352f1c76497bec1504e032d5d435435c1c593c82b19b6ddb5d5f122cb7e00322dc399338299cc503957f9d4fdd479b27068fe44ed785471708d0b6b92f6593ef309a061de7c7b5e354ddaf8d7ae18bd59139e46e6d6030c6aa3dd0e597d259bb81fb5322650d3ff78e7a9b496e3edcf41f932637949c81768f7c889df89e8a661bebe9616abfa6b110d05140f5e094d94e22208c0ffc3ad2cbf1f9f8e67a1c2ac25b5b16bbf1bde237615e5551077994cd613afed8f1c84fc8586fa5211d18d4f2b9a04f36873f81dc9e1328a18e5969a45e1d0528bafdda1517ba25fdad059832746a1cd74e1d51135aca45fb26e69fecab77f0f8ce2842c974d2d5c9e0e7a00649744a8cd4e644e7ca10a9d7eed8fc0af7e52fb5ea5806143969c69d313e3bd5b13c4265f8cebbadc8578b77f0ccac34bd21241a8e69a92536141c0202fc4291e19cfad61e0aab1912425bcb34cc15c96a5bc61add4072dac79134b97bf3e22ec6175c8aef3a99dd29898da16cb7fec12e70b2c57fef53d002bb4b97d6ff586b9dea6941794be090269961a4f7015a6ceccf0fe98ed8c735f61c16233f5372959328cd563bb027f8c0b63e00777aa40a4fd8cb50b58abe133a05089971ff3b2049d26d70e6e75f7520c08ba495b0658903da7e5f663f887fda0ceb7c501c47b8e2905ac47886151cf1e6e238cec8f8832a4ef43740b7c6ae4c25a16d9e258115f80ca18c247e4f81cffa9bd3900e71310c39449940e884b6baec8204d269ab7f4f176d37903420e93532396419d278a5557e13fcf051261d70c87976697e6c428fe1c3503b5dad0c14104a6106996105fd354ed36e6c527c33fd6355f8e8f144e5e0a53206e245531dad6569fcc8003b6b48d8f7f8ca87e8ff56316da49f84385456aa4f8a7374d36d528893330df5e85fecc1ee989044b146dfc8c748e631e462fab6c7af722d94e58396f7af04f4bc79f1862d97026a55d9b65e105a32fc9f6d624dd880ad1938be73734776760ece568176f9f25d76cbfdbec92a3f0bcc516275452df6274058d11b02dc11296a69d97ea0470f5b520706facd5c54f99b43ee40faf5f532ef27fc9186a8e722f2e240f6e593546436a7e1752ba8fc65013ad14b6fdbc8c2b522d9e38e106e3c0e099c443028357a5938935b3fd669b214fd0f6255521a416480e7c6c3a05cf96b17ca70ea81887e2721dee9ea2b48a69fba7a37c223b9a3441c9cddc5422ee4f3f92a15968f9a0cf68ebcd44a96a838adb177bdbec1b6b46850407ade322a50c43159887128b933a8aaf779649b8f75afe7855ab2dff933a95703a2aafd935eafac3039158408124cf5261a3d02eb8133bac3d68c755820df93df5757bac858f42b101027bdb7e48d2be40a0b4a36cee1acb8bfd2e045e2fd9d655f53c02b8968a910726ec406bd5d4674e74e323f93befd9296d4ec07275412cd34fb44c6f903db1ca991b080a346193d053b08a812433cc4ae77cc8aa3d957787d19b16951ee15055faac60b51429f3fb55fde3ca5e4f099f708b8be4a875b1f85940eaf52354f3c03999619d0efa0b6892451c5de1f63146c0d0effc80ff72c7acd7a39c9d7abe3cec1030c4e6a0ef92ee2a7bbda643310975d26b3bae62bb0e638647910ddf33f8bbaaf12ecc1e918c9e137b096a354232ce8bc86564fbccb31ea6b24f08b9d2cc42e114c4bbfed4466f893d694a3958cd57b1c665d655a929b8439dafbccaef3acce753fe019cefa10c50c5a4c815881ca6fb2312cb7fa7e6c9d3e483cb731897aae6b808aa4447d2e269ca66d7ddba3c73a0e36245242ca1beeed47244038ff28c46bee718d2dd91b455577c398614d6a82225d99dc049cb04ca17ea6e099be4ba87a29f17fd70631a758bd25a3508a4a8da0fd5bba13ba32917107971fbe6f4a4e180400518e45ecd1f8f83a96238037099ec90908dc324d320b74b8c0505a0a0f5163367fe16c4813c9ef3af4b8e7439a99c5b16133f2874f40d3c9d4007750cf82a10ce38986f0cc92168e0ddd6584edc4f0776db9afec6a3e311bae6dd50dae612aad882ea6a55d2301c4ab05c4eef7e7c490585ccb19b92788ca8dddab135505196cdc222eed322c6278ad345ca26e8529a8306a49c842ff6d2e7deae102e318f5e9d7af73d2f81cb3e8243c8c3c4a97af29d1a7e7281bb9fb5609ae04b94b32107319785d072eda7e7adf140f8b9e2c9cce055c8530d60dae6beeb88165283a16eab5c00e97fa837050539959812bfe6d179ed53669f1c2e225cec3c2e91e846e5a923f0af864c104c694a2554426553f58231eb34121a8e1fc05b2dd21e78a321f2245d16d45ea2dc7f5950ed1c68a054c8de85e86098d2bdd5ffa189219a5fb185090f952657be6b8ba7df780098dcd3858030f2aff6be44bdd49e10f1af795d0282442d43e301c407ec2d9e20cae392a94a499642f96fce9608ec495e1f4262eaf518badb164f1ecfdae75084a18b00f989d185741ab4d407bdcc007518161fb8159242b0ff39600729107c9bf797f459692d15e4e2d1d4f854100ba5d96d36f17261edfcbf24e9eeb86837fc5b18f85ddbc03e130f9c64b19d2b0cdf0de0cb69cff7d5a3d204a3fc46072e1275956ded5343cabd642b02791dd03f7ecac79015c0bf35d06a8305ff1729b0ce744a8b09d6c4af9e5bbe544ff83cb19a004c6bc85fc39f8a6996c8a6d432d5f5435141e13bef62e1ec4910e61a3d0b75be08b75139429f5dec6a2cf2dda44963316f1b52c0ac38ac36d12f67729b845981d9e2ec6adffe113e7a68a6f5d70ea9de3f0aebc5a6174dfb2f8eca0d8cce9437fd4a91c00fcbd3e1ed1e1a257d26f3fb7b5876291e8caee952ec5fd74ff348afb1593891f8dd4f958395b1dd151addc4208dfb531359e69410f347e57aeb63aea26f7644d483e814fe1b8454a2ff89212373bbbd24fc80744bcdc7c96a9e874ef1e6ba80c99360da372737f76852f432a764d20d6c7b049aa4ec81aa56365fa2d433e7e491724b89a3ae4641e195e8f9bd65ab933341f1701fe4a0e062bd63f07c7c228ea6369c46426c468ff0f59464cd2dc191b2d100645055b42eeb845896b2fd9ee2256e0a18f24e4a7bb350ca5b9081a5a4a0e1bc8b0ec7192f0c3631a916193e436f3385bc823a7a8cc6dde9ad775b13d89ef218a05d3bc4d3c8f5864d00322e49dc7b76efd8aee81bfaa937348bc52917a86f63a59ec21ebbae9fc152ac006285bf44e46d54de933e50508c258237da6883a7d40eda406950ee07c95622220f3f80573ce85918e075839bb546414bbabfdb177c57e39524719e011fcb840e69d4780013cf931ba8ae19ee3f124feb6f8b063dae14ae3ee403f7dd6b0b526079654f1d7b3efbac169127f22df7962e9c15f975551d5d9b03564c866f562faed80c812f00165a0e9c08185f197ce8da58e3cdba4639aaf409729cd003743036fdb86656a304074d9bbb5cfefaee039f50e1ace2d3361b6b6b1bbb321b92eba54265da704b40910ede42dfdbaa7c351ff003f20d8e4411d233b63e61de361840bbd777295caf68040ff7a8bd39d88fe26d1dabbe67bf00bec925276f683fecddff6bb7065ccdd2919fc30512d0306dffc00fbe6b7bb59dbc512fc3aad165076ea1b96794e54e768036405e97e609610de8b657cd536b7624256c4417d2b291d20cc98aaef86a75febba29791fc9a24fa37876126e966bbf2f3f7a2629df16c877c676955d331aa601cfa1ed4a18b994db38dbe36b18c314391907d8aa0cf660c727199e28a5439e1f0a556d6a892c9eb6cfc0901a44ce321d707a79fae0b62a25a21772d957d60e1eb72c49003aad9024369346bf048f089f7f2f1bca0ce21eb83e153f86c76e461ac4cb0a32bd9f8973975a6cbe06b2431ef400043cb27f957ae973a8e53d1b0586123acd3c6ab63dad16ea8788dac041c32fb7b0154ebd52dc4928cb6d6590d4a3a7c76f2cbf8c09281a04d73926a95ebc0acf936bce64aac4230424328fef01749180dad5749c01b4640ab7f3443893b54fe36e4e4e63b8f57c531", 0x1000}, 0x1006) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bind$inet6(r1, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0xffffffee) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 00:19:02 executing program 2 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:02 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:02 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x700, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 236.550733][T13337] FAULT_INJECTION: forcing a failure. [ 236.550733][T13337] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 236.572051][T13337] CPU: 1 PID: 13337 Comm: syz-executor.2 Not tainted 5.3.0-rc2-next-20190802 #58 [ 236.581170][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.591230][T13337] Call Trace: [ 236.594535][T13337] dump_stack+0x172/0x1f0 00:19:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 236.598885][T13337] should_fail.cold+0xa/0x15 [ 236.603493][T13337] ? fault_create_debugfs_attr+0x180/0x180 [ 236.609317][T13337] ? ___might_sleep+0x163/0x280 [ 236.614184][T13337] should_fail_alloc_page+0x50/0x60 [ 236.619381][T13337] __alloc_pages_nodemask+0x1a1/0x900 [ 236.624749][T13337] ? kstrtouint+0x142/0x1a0 [ 236.629235][T13337] ? __alloc_pages_slowpath+0x2520/0x2520 [ 236.634973][T13337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.641206][T13337] ? pmd_val+0x85/0x100 [ 236.645345][T13337] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 236.651567][T13337] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 236.657794][T13337] alloc_pages_vma+0xdd/0x560 [ 236.662470][T13337] __handle_mm_fault+0x1de8/0x3f20 [ 236.667571][T13337] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 236.673146][T13337] ? __kasan_check_read+0x11/0x20 [ 236.678172][T13337] ? trace_hardirqs_on+0x67/0x240 [ 236.683251][T13337] handle_mm_fault+0x1b5/0x6b0 [ 236.688096][T13337] __do_page_fault+0x536/0xdd0 [ 236.692852][T13337] do_page_fault+0x38/0x590 [ 236.697362][T13337] page_fault+0x39/0x40 [ 236.701500][T13337] RIP: 0033:0x4080ad [ 236.705384][T13337] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 41 53 05 00 90 41 55 41 54 55 53 48 81 ec d8 1b 00 00 <48> 89 bc 24 08 01 00 00 48 89 b4 24 00 01 00 00 48 89 94 24 f8 00 [ 236.724993][T13337] RSP: 002b:00007fdc88e35070 EFLAGS: 00010202 [ 236.731057][T13337] RAX: 00000000004080a0 RBX: 00007fdc88e36c90 RCX: 0000000000000000 [ 236.739020][T13337] RDX: 000000002000f000 RSI: 0000000000000008 RDI: 0000000000000005 00:19:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x17, 0x41f, 0x9}, {{0x77359400}, 0x11, 0x6, 0x9}], 0x30) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x40, 0x0) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000180)=0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000300)=""/4096, &(0x7f00000000c0)=0x1000) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000140)={0x700000000000, 0x9ea, 0x8001}) [ 236.746983][T13337] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 236.754957][T13337] R10: 0000000000000064 R11: 0000000000000000 R12: 00007fdc88e376d4 [ 236.762946][T13337] R13: 00000000004c88e8 R14: 00000000004df6f0 R15: 0000000000000009 [ 236.773439][T13337] syz-executor.2 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 236.782677][T13337] CPU: 1 PID: 13337 Comm: syz-executor.2 Not tainted 5.3.0-rc2-next-20190802 #58 [ 236.791788][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.801842][T13337] Call Trace: [ 236.805126][T13337] dump_stack+0x172/0x1f0 [ 236.810251][T13337] dump_header+0x177/0x1152 [ 236.814750][T13337] ? ___ratelimit+0xf8/0x595 [ 236.819327][T13337] ? trace_hardirqs_on+0x67/0x240 [ 236.824336][T13337] ? mark_oom_victim.cold+0x18/0x18 [ 236.829520][T13337] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 236.835312][T13337] ? ___ratelimit+0x60/0x595 [ 236.839906][T13337] ? do_raw_spin_unlock+0x57/0x270 [ 236.845009][T13337] oom_kill_process.cold+0x10/0x15 [ 236.850115][T13337] out_of_memory+0x79a/0x12c0 [ 236.854801][T13337] ? lock_acquire+0x190/0x410 [ 236.859504][T13337] ? pagefault_out_of_memory+0xeb/0x11c [ 236.865067][T13337] ? oom_killer_disable+0x280/0x280 [ 236.870269][T13337] ? mutex_trylock+0x252/0x2d0 [ 236.875044][T13337] ? pagefault_out_of_memory+0xeb/0x11c [ 236.880590][T13337] pagefault_out_of_memory+0x109/0x11c [ 236.886151][T13337] ? out_of_memory+0x12c0/0x12c0 [ 236.891109][T13337] ? down_read_non_owner+0x450/0x450 [ 236.896423][T13337] mm_fault_error+0x12f/0x380 [ 236.901270][T13337] __do_page_fault+0xbc0/0xdd0 [ 236.906043][T13337] do_page_fault+0x38/0x590 [ 236.910536][T13337] page_fault+0x39/0x40 [ 236.914679][T13337] RIP: 0033:0x4080ad [ 236.918568][T13337] Code: 0f 1f 44 00 00 c6 44 24 0e 06 48 c7 04 24 10 00 00 00 e9 56 ff ff ff e8 41 53 05 00 90 41 55 41 54 55 53 48 81 ec d8 1b 00 00 <48> 89 bc 24 08 01 00 00 48 89 b4 24 00 01 00 00 48 89 94 24 f8 00 [ 236.938376][T13337] RSP: 002b:00007fdc88e35070 EFLAGS: 00010202 [ 236.944451][T13337] RAX: 00000000004080a0 RBX: 00007fdc88e36c90 RCX: 0000000000000000 [ 236.952868][T13337] RDX: 000000002000f000 RSI: 0000000000000008 RDI: 0000000000000005 [ 236.962685][T13337] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 236.970671][T13337] R10: 0000000000000064 R11: 0000000000000000 R12: 00007fdc88e376d4 [ 236.978641][T13337] R13: 00000000004c88e8 R14: 00000000004df6f0 R15: 0000000000000009 [ 236.991252][T13337] Mem-Info: [ 237.010250][T13337] active_anon:116032 inactive_anon:192 isolated_anon:0 [ 237.010250][T13337] active_file:7861 inactive_file:36735 isolated_file:0 [ 237.010250][T13337] unevictable:0 dirty:287 writeback:0 unstable:0 [ 237.010250][T13337] slab_reclaimable:13069 slab_unreclaimable:115739 [ 237.010250][T13337] mapped:58916 shmem:258 pagetables:1803 bounce:0 [ 237.010250][T13337] free:1196811 free_pcp:595 free_cma:0 [ 237.087355][T13347] IPVS: length: 4096 != 24 00:19:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x900, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 237.131021][T13354] IPVS: length: 4096 != 24 00:19:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:03 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 00:19:03 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x10000000203, 0x40) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1f4f, 0x5, 0x6, 0x100, 0xffffffff90aedfb4]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1f}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44800) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045730, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)={0x2e, 0x6, 0x0, {0x3, 0x6, 0x5, 0x0, 'SEG6\x00'}}, 0x2e) [ 237.221424][T13337] Node 0 active_anon:470668kB inactive_anon:768kB active_file:31304kB inactive_file:147040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235764kB dirty:1148kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 335872kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 00:19:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xa00, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:03 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 237.377860][T13337] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 237.430955][T13337] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.467707][T13337] lowmem_reserve[]: 0 2549 2550 2550 [ 237.497084][T13337] Node 0 DMA32 free:987928kB min:36200kB low:45248kB high:54296kB active_anon:464124kB inactive_anon:1068kB active_file:30032kB inactive_file:146948kB unevictable:0kB writepending:1136kB present:3129332kB managed:2613912kB mlocked:0kB kernel_stack:8352kB pagetables:7360kB bounce:0kB free_pcp:2468kB local_pcp:1260kB free_cma:0kB [ 237.626770][T13337] lowmem_reserve[]: 0 0 1 1 [ 237.631337][T13337] Node 0 Normal free:4kB min:16kB low:20kB high:24kB active_anon:60kB inactive_anon:0kB active_file:1272kB inactive_file:92kB unevictable:0kB writepending:12kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.663171][T13337] lowmem_reserve[]: 0 0 0 0 [ 237.676402][T13337] Node 1 Normal free:3782528kB min:53668kB low:67084kB high:80500kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.715120][T13337] lowmem_reserve[]: 0 0 0 0 [ 237.719700][T13337] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 237.743196][T13337] Node 0 DMA32: 4786*4kB (UME) 1249*8kB (UME) 1056*16kB (UME) 615*32kB (UME) 248*64kB (UME) 35*128kB (UME) 10*256kB (UM) 2*512kB (UM) 3*1024kB (UE) 3*2048kB (UE) 216*4096kB (UM) = 983600kB [ 237.763033][T13337] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 237.775103][T13337] Node 1 Normal: 70*4kB (UME) 243*8kB (UME) 251*16kB (UME) 73*32kB (UE) 16*64kB (U) 10*128kB (UME) 7*256kB (UME) 3*512kB (U) 2*1024kB (ME) 1*2048kB (M) 919*4096kB (M) = 3782528kB [ 237.793374][T13337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.803052][T13337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 237.812822][T13337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.822803][T13337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 237.832497][T13337] 45133 total pagecache pages [ 237.837531][T13337] 0 pages in swap cache [ 237.841819][T13337] Swap cache stats: add 0, delete 0, find 0/0 [ 237.848301][T13337] Free swap = 0kB [ 237.856070][T13337] Total swap = 0kB [ 237.859922][T13337] 1965979 pages RAM [ 237.864147][T13337] 0 pages HighMem/MovableOnly [ 237.868947][T13337] 340606 pages reserved [ 237.873489][T13337] 0 pages cma reserved 00:19:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:19:03 executing program 3: r0 = socket(0x10, 0x2, 0xc) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x166) r2 = socket(0x10, 0x2, 0xc) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000080)={0x6, 0x1, 0x81, 0x34, 0x60000000, 0xb}) write(r2, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) 00:19:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xe00, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x40001) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x1) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'U-', 0x5f0}, 0x28, 0x1) syz_emit_ethernet(0x16, &(0x7f00000002c0)={@remote, @empty, [{[], {0x8100, 0x1, 0x3}}], {@mpls_uc={0x8847, {[{0x0, 0x0, 0xa7}]}}}}, &(0x7f00000000c0)={0x20000000001, 0x0, [0x701, 0x0, 0x0, 0x59a]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xff, 0x500) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000001c0)) 00:19:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 237.877695][T13337] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=12309,uid=0 [ 237.893297][T13337] Out of memory: Killed process 12309 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35808kB, shmem-rss:0kB, UID:0 [ 237.974590][T13403] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.998673][T13403] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:04 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x1300, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 238.028549][T13403] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 238.080734][T13488] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:04 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x800) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid'}}, {@cache_mmap='cache=mmap'}]}}) 00:19:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0x0) 00:19:04 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x2000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:04 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:04 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x3f00, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x40001) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x1) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'U-', 0x5f0}, 0x28, 0x1) syz_emit_ethernet(0x16, &(0x7f00000002c0)={@remote, @empty, [{[], {0x8100, 0x1, 0x3}}], {@mpls_uc={0x8847, {[{0x0, 0x0, 0xa7}]}}}}, &(0x7f00000000c0)={0x20000000001, 0x0, [0x701, 0x0, 0x0, 0x59a]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xff, 0x500) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000001c0)) 00:19:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x3, 0x0, 0x0, 0x0) 00:19:04 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x4000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x0, "a9e7fe27dfb02c8f"}) getdents64(r0, &(0x7f0000000300)=""/4096, 0x1000) 00:19:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000040)={{0x200, 0xa225, 0xc59d, 0x1, 0xb1, 0x9}, 0x1}) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0x3335, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu&-&&!\n\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) 00:19:05 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x5800, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x4, 0x0, 0x0, 0x0) 00:19:05 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:05 executing program 3: r0 = inotify_init() r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x0, 0x3, @raw_data=[0x1f, 0x1ff, 0x400, 0x80000001, 0x400, 0x0, 0xffff, 0x100000001, 0x9, 0x6, 0x100000000, 0xffffffffffff7fff, 0x940, 0x0, 0x1000, 0x1f77]}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000100)={0x6, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @random}, {}, {}, {}, {0x0, 0x0, 0x0, @dev}]}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000280)=0x74, 0x504) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0xfffffffffffffe98, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f00000004c0)) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0xc, @pix={0x6, 0x0, 0x0, 0x0, 0x0, 0xf069, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) mmap$IORING_OFF_SQES(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x800001, 0x12, r3, 0x10000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000040)) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @null, r6}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x6) 00:19:05 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x5c00, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:05 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x7, 0x8) getsockname$netrom(r1, &(0x7f0000000080)={{0x3, @rose}, [@rose, @null, @netrom, @default, @netrom, @netrom, @remote, @netrom]}, &(0x7f0000000100)=0x48) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x10000) r2 = semget(0x3, 0x4, 0xc2) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000140)=""/97) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x19, 0x0, 0x0) 00:19:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x5, 0x0, 0x0, 0x0) 00:19:05 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x5dc0, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x1, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6008de0600383a0000000000000000000000ffffe0000002ff0200000000000000ce9b00000000000000907800000000609433df00008800000000b000000000000000000000000000000001fca967e17f791010000000100000000000000000ce019fe7d3bcd47058b923f4b78f268a4aecaeb57be17b2206becc85a842a059c9abc6960eb8df30edd71c0dd9e466368211b80e2cb0815fa5645c70b1242c5bbd7c4d30ed1132cf96a5472efab05ab13f108ec3053361aa3097d2592b35fccfdf00"/221], 0x0) r0 = fsopen(&(0x7f0000000000)='v7\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000009000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x0, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x290000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x401, 0x1ff, 0x3}]}, 0x10) 00:19:05 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x6000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x6, 0x0, 0x0, 0x0) 00:19:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:06 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:06 executing program 3: setresuid(0x0, 0xfffe, 0x0) link(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)='./file1\x00') 00:19:06 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x7f00, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7, 0x0, 0x0, 0x0) 00:19:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x1, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6008de0600383a0000000000000000000000ffffe0000002ff0200000000000000ce9b00000000000000907800000000609433df00008800000000b000000000000000000000000000000001fca967e17f791010000000100000000000000000ce019fe7d3bcd47058b923f4b78f268a4aecaeb57be17b2206becc85a842a059c9abc6960eb8df30edd71c0dd9e466368211b80e2cb0815fa5645c70b1242c5bbd7c4d30ed1132cf96a5472efab05ab13f108ec3053361aa3097d2592b35fccfdf00"/221], 0x0) r0 = fsopen(&(0x7f0000000000)='v7\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000009000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x0, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x290000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x401, 0x1ff, 0x3}]}, 0x10) 00:19:06 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xc05d, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:06 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x18, 0x0, 0x0, &(0x7f0000000040)) 00:19:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:06 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xe803, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x6, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='setgroups\x00') close(r1) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000040)={0x0, 0xff}, 0x2) 00:19:07 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7e, 0x0, 0x0, 0x0) 00:19:07 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xf401, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:07 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x401) read(r1, 0x0, 0x2d6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0xa, &(0x7f0000000240)=[{0x8, 0x9, 0x8, 0x7}, {0x6, 0x3, 0x1400, 0xfffffffffffffff9}, {0x6, 0x0, 0x6715, 0x7}, {0x100000000, 0x400, 0x81, 0x3f}, {0x248, 0x1, 0x2, 0x800}, {0x0, 0x5, 0x8, 0x100000001}, {0x9, 0xffff, 0xfff, 0x1}, {0x7fff, 0x81, 0x1284, 0xff00000000000000}, {0x5, 0x1000000, 0x9, 0x40}, {0x0, 0x3, 0x9}]}, 0x10) tkill(r0, 0x1000000000016) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000140)=0x78) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0x9, 0x4) 00:19:07 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigsuspend(&(0x7f0000000100), 0x8) tkill(r0, 0x1000000000016) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x9, @sliced={0x1, [0x2, 0x9, 0x2, 0x0, 0x6, 0x57, 0x7, 0x6, 0x6, 0xc040, 0x3, 0x2, 0x81, 0xbe4, 0x7, 0x100, 0x3, 0x4, 0x6, 0x1, 0x3, 0x2a4, 0x100000000, 0x9, 0x8, 0x2, 0x80000001, 0x1f, 0x5, 0x8, 0xdc, 0x1, 0x4, 0x3, 0x1, 0x7, 0x6, 0x10001, 0x2, 0x26, 0x2, 0xff, 0xff, 0x4, 0x5, 0x4, 0x1, 0x23e], 0x100000001}}) 00:19:07 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x1000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x300, 0x0, 0x0, 0x0) 00:19:07 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x2000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:08 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:08 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x3000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x500, 0x0, 0x0, 0x0) 00:19:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:08 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 00:19:08 executing program 0: r0 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='-{,#mime_typeppp1\x00', 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0xff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="00000101000000", @ANYRESHEX=r3, @ANYBLOB=',\x00']) 00:19:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x600, 0x0, 0x0, 0x0) 00:19:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:08 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x4000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 242.497163][T13956] 9pnet: Insufficient options for proto=fd [ 242.560459][T13969] 9pnet: Insufficient options for proto=fd 00:19:08 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x7}, 0x3c) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x6, 0x2001) r0 = socket(0x7, 0x6, 0x401) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x5, 0x3f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x800, 0x5, [0x8, 0x1, 0x4, 0x401, 0xffff]}, &(0x7f00000001c0)=0x12) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x400) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) 00:19:08 executing program 3: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040400010000001704000001000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) get_mempolicy(&(0x7f0000000040), &(0x7f00000001c0), 0x3, &(0x7f0000ffa000/0x3000)=nil, 0x0) 00:19:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:09 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:09 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x7000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x700, 0x0, 0x0, 0x0) 00:19:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x26, 0x0, 0x4, 0x0, {0x8}}, 0x14}, 0x1, 0x6087ffffffff}, 0x0) 00:19:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=R']) 00:19:09 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x8000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:09 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x105, 0x800, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000080), 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x40a80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="3b70000008000000181f0000", @ANYRES32=r0, @ANYBLOB="0000000001008104"], &(0x7f0000000080)='GPL\x00', 0x1, 0x48, &(0x7f00000000c0)=""/72, 0x41100, 0x5, [], r1, 0x12, r2, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x6, 0x3432, 0x1ff}, 0x10}, 0x70) [ 243.412408][T14015] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 00:19:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xb99, 0x403) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='^\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0xfffffffffffff801}}, 0x18) 00:19:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:09 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffa8f, 0x800) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) futex(0x0, 0x400000000000085, 0x0, 0x0, &(0x7f0000000040), 0x4000000) 00:19:10 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:10 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x9000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0xffffffffffffffff, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x2000, 0x0, 0x0, 0x0) 00:19:10 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffff, 0x73391de8a43476f9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x3, @local}, @in6={0xa, 0x4e23, 0x9, @ipv4={[], [], @loopback}, 0xff}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0xfff}, @in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @empty}, 0x5}, @in6={0xa, 0x9, 0x4, @mcast2, 0x1ff}, @in={0x2, 0x4e24, @multicast1}], 0x9c) 00:19:10 executing program 0: r0 = socket$inet6(0xa, 0x800040000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001300)=0x7ff, 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f00000000c0), 0x9, &(0x7f0000ffb000/0x3000)=nil, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc}]}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x5a) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="45c2b31771ca56751a3eb6227b40fe8029cdf99d9b99e4acb0397998948789533d8fc11a783cdf6cdda75cf7035a7c27afb1ae46d9e19be7f30e9855d80de88fbe4e3a7deb701e540e93034f4ef2c0a3ee5ee47700"}, {&(0x7f0000000440), 0xfe16}, {&(0x7f0000000580)="424acde6f250b4f50d8a9d52c9551b4e7eb3cc0baa1100d1cb468de407ed27f46e8f5c4f95ac4e70c906a5921f33d3d6ea68d4cdfd29494c2e3359bed775d5c10a7a509ce4b1efdebfb01e392111a2841187f3bf0e9232e38d37ff74c6021817746417031b2482942806eff1485ae3d41a25e2842b6b68c3fa7552185187698b446bf984289f62985141080b36d51fa6b685948d77d62b4036e62dc16ce66bfa3d608bbd7b0325e10a6f60ddbd3c4d84e5c4c1e825"}], 0x2e1}, 0x0) 00:19:10 executing program 3: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x0, 0x0) unlinkat(r8, &(0x7f0000000780)='./file0\x00', 0x200) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x4, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@access_uid={'access', 0x3d, r5}}], [{@smackfshat={'smackfshat'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'trusted*+['}}, {@fsuuid={'fsuuid', 0x3d, {[0x3d, 0x30, 0x77, 0x30, 0x34, 0x75, 0x64, 0x7d], 0x2d, [0x61, 0x34, 0x77, 0x36], 0x2d, [0x3f, 0x62, 0x77, 0x63], 0x2d, [0x0, 0x62, 0x77, 0x7f], 0x2d, [0x35, 0x62, 0x37, 0x31, 0x65, 0x30, 0xc0e55a0818206ba8]}}}, {@euid_lt={'euid<', r6}}, {@dont_measure='dont_measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'procvmnet0'}}, {@euid_lt={'euid<', r7}}, {@appraise_type='appraise_type=imasig'}]}}) dup2(r1, r2) 00:19:10 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xa000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000024000b04000000000200000000000000", @ANYRES32=r2, @ANYRES16=r1], 0x3}}, 0x0) 00:19:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x4000, 0x0, 0x0, 0x0) 00:19:10 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xe000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:11 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:11 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f0000001400)='y\x00', 0x2, 0x3) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udplite\x00') ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000180)={0x10, 0x8, &(0x7f0000001340)="be34f3aca390f5dfe9837340829978994a04792f46df4f0fc3f9a30673d7fba50ab8fc2904b844c854cd63597b7f40f4f619b98396b4f0daa8a3a18b9eeb9ea6a8c4ba5895ac79419db9ca8d571ef48185b2174b5202668df5c6dd0eeda37ddb1cf0836ff437afc72cd29f399c8c91992896553c348a4048e60e619f743fe51173", {0x8, 0xfffffffffffffff7, 0x76774752, 0x8, 0x3, 0x3d, 0x0, 0x7f6}}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) write$binfmt_misc(r1, &(0x7f0000001440)={'syz0', "cb5cb5c0a1afaa45f4764ed87bafb7b157e1017a5b301c445f6fc781b6a8535110ddd1848ec599d9f6c53fbee06545e592fc06b472f7"}, 0x3a) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000001480)={0x3, 0x0, [0x0, 0x0, 0x0]}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x8f7b521ea16a1836) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xf004, 0x2000}) sendto$ax25(r2, &(0x7f0000000340)="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", 0x1000, 0x8000, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 00:19:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x4]}, 0x5}]}, &(0x7f0000000100)=0x10) 00:19:11 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x13000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x60ff, 0x0, 0x0, 0x0) 00:19:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:11 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x20000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:11 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000180)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffff001, 0x5) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e05004e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000000)="53030000c90dca800437f401000000040000076206aa0001ffffff00000040000000000000000000e0cd12a23086f8fddb644d8d37b4a77277080c260ad8879c6bebbca947a9473d6ca44c9d03f1a46deaffbc50f58e84ec", 0x58}], 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r2, 0x1f, 0x4, 0x7fff, 0x5}, &(0x7f0000000280)=0x14) 00:19:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7600, 0x0, 0x0, 0x0) 00:19:11 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x3f000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:12 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x140, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0xffff8000, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x161000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x6, 0x3f, 0x5}}, 0x28) 00:19:12 executing program 0: getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f0000000a00)) rt_sigprocmask(0x1, &(0x7f0000000000), &(0x7f0000000040), 0x8) getresgid(0x0, 0x0, &(0x7f0000000480)) fstat(0xffffffffffffffff, &(0x7f0000000640)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x20000007, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) bind$bt_sco(r0, &(0x7f0000000180)={0x1f, {0x2, 0x7, 0x6, 0x7ff, 0x0, 0x8000}}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) 00:19:12 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x40000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:12 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7e00, 0x0, 0x0, 0x0) 00:19:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:12 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x400}, 0x4) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x5d9, 0x0, 0x0, 0x4df6dc43}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000001c0)={0x9, r3}) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010502000270f7f8", 0x3a}], 0x0, 0x0) umount2(0x0, 0x4) 00:19:12 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x58000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x9600, 0x0, 0x0, 0x0) 00:19:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x0, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:12 executing program 0: getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f0000000a00)) rt_sigprocmask(0x1, &(0x7f0000000000), &(0x7f0000000040), 0x8) getresgid(0x0, 0x0, &(0x7f0000000480)) fstat(0xffffffffffffffff, &(0x7f0000000640)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x20000007, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) bind$bt_sco(r0, &(0x7f0000000180)={0x1f, {0x2, 0x7, 0x6, 0x7ff, 0x0, 0x8000}}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) 00:19:12 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x5c000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x0, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:12 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x60000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x0, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 246.861407][T14193] FAT-fs (loop3): Directory bread(block 1281) failed [ 246.907019][T14193] FAT-fs (loop3): Directory bread(block 1282) failed [ 246.984961][T14193] FAT-fs (loop3): Directory bread(block 1283) failed [ 247.025143][T14193] FAT-fs (loop3): Directory bread(block 1284) failed 00:19:13 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x200000, 0x0, 0x0, 0x0) 00:19:13 executing program 0: getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f0000000a00)) rt_sigprocmask(0x1, &(0x7f0000000000), &(0x7f0000000040), 0x8) getresgid(0x0, 0x0, &(0x7f0000000480)) fstat(0xffffffffffffffff, &(0x7f0000000640)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x20000007, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) bind$bt_sco(r0, &(0x7f0000000180)={0x1f, {0x2, 0x7, 0x6, 0x7ff, 0x0, 0x8000}}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) [ 247.084593][T14193] FAT-fs (loop3): Directory bread(block 1285) failed [ 247.114461][T14193] FAT-fs (loop3): Directory bread(block 1286) failed [ 247.125465][T14193] FAT-fs (loop3): Directory bread(block 1287) failed [ 247.188284][T14193] FAT-fs (loop3): Directory bread(block 1288) failed [ 247.247967][T14193] FAT-fs (loop3): Directory bread(block 1289) failed [ 247.268413][T14193] FAT-fs (loop3): Directory bread(block 1290) failed 00:19:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000c0002000000000002000000"], 0x20}}, 0x0) 00:19:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, 0x0) 00:19:13 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x7f000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x400000, 0x0, 0x0, 0x0) 00:19:13 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) add_key(0x0, 0x0, &(0x7f0000000c80)="ee886fda3c83d0ec7154c0b689c33ff3846aca99014ca3b1aa5bff41d913604862bc7bfdb253ad9d19d20830", 0x2c, 0xfffffffffffffffb) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r2, 0x8001, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr=0x7}, 0x1f}}}, 0x118) fcntl$getown(r0, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r1, 0x0, 0xa, &(0x7f00000002c0)='/dev/zero\x00'}, 0x30) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) fcntl$setown(r1, 0x8, r4) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) write$apparmor_exec(r1, &(0x7f0000000440)={'stack ', '#vboxnet0-]nodev\x00'}, 0x17) process_vm_readv(r3, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/222}, {&(0x7f0000000680)=""/173}, {&(0x7f0000000740)=""/151}, {&(0x7f0000000cc0)=""/4096}, {&(0x7f0000000800)=""/110}, {&(0x7f0000000880)=""/213}, {&(0x7f0000000980)=""/190}], 0x10000000000001e4, &(0x7f0000000500), 0x1, 0x0) [ 247.393950][T14236] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 247.403076][T14236] FAT-fs (loop5): Filesystem has been set read-only [ 247.412366][T14236] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:13 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x8dffffff, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:13 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x7f000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 247.466898][T14236] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 247.504352][T14236] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[], 0x0, 0x0, 0xffffffffffffff81}) 00:19:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, 0x0) [ 247.547727][T14235] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:13 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x50f000, 0x0, 0x0, 0x0) 00:19:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, 0x0) 00:19:13 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000ac0)={0x0, 0x0}) ptrace$setsig(0x4203, r1, 0x5, &(0x7f0000000b00)={0x16, 0xb41, 0x100000000}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x8200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000a40)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200527bd7000fedbdf25010000000000000007410000004c00180180000073797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = getpid() process_vm_writev(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000a80)={0x4, 0x2, 0x40, 0x0, 0x5, 0x1, 0x81, 0x100000000, 0x9, 0xf437, 0x8, 0x8, 0x0, 0x4d, 0x1f, 0xef, 0x3, 0xade6, 0x800}) 00:19:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r1, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8800, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x4000) r2 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x3, 0x2) r3 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x2, 0x400400) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000200)={0x2000, &(0x7f0000000140), 0x2, r3, 0x8}) close(r1) 00:19:13 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xc05d0000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={0x0}) 00:19:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x707100, 0x0, 0x0, 0x0) 00:19:14 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000140)={0x7, 0x8, {0x57, 0x6, 0x7, {0x3, 0x6}, {0x1, 0xffffffffffffff81}, @ramp={0x3, 0x0, {0x4, 0x0, 0xfffffffffffffff8}}}, {0x52, 0x4010, 0x2, {0x0, 0xffffffff80000000}, {0x80, 0x8}, @period={0x5d, 0x3, 0x745e35d2, 0x2, 0xffff, {0x1f, 0x4, 0x0, 0x3}, 0x7, &(0x7f0000000100)=[0xfffffffffffffffd, 0x4a6, 0x80, 0x6b, 0x41, 0x80, 0x0]}}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x103802) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000001c0)={0x2f, "8ab14977950fb966c9638d926e67c158de3b5eec547d59c27d42151ce08f1b45e66e389c468cb25037f2e037c95a40"}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000200)={r1, 0x0, 0x2, 0x7fffffff, 0x4cc2}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x8000000, 0x25}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x6, 0x0, 0x2}) 00:19:14 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xe8030000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000007, 0x7fff, 0x8000000001}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x400000077fffb, 0x0, 0x820000, 0x0}, 0x2c) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x8011, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400800, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) 00:19:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={0x0}) 00:19:14 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:14 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xf4010000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:14 executing program 3: r0 = socket$inet(0x2, 0x80007, 0x1f) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000140)) 00:19:14 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xfffffffb, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/71) 00:19:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={0x0}) 00:19:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x70e000, 0x0, 0x0, 0x0) 00:19:14 executing program 1 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:14 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xf5ffffff, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:14 executing program 0: ptrace$setregset(0x4205, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@caif=@dbg, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 00:19:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x10000, 0x5, 0xffff, 0x3f, 0x771, 0x3, 0x1, 0x1}, &(0x7f0000000180)={0x36, 0xfffffffffffffff8, 0x1f, 0xfff, 0x7, 0xfffe00000000000, 0x1, 0x1}, &(0x7f00000001c0)={0x10001, 0x630b, 0x8, 0x0, 0x7, 0x3ff, 0x1}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={0x9e}, 0x8}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffffffffffc) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000003c0)={r1, &(0x7f0000000340)=""/115}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0x30, 0x9, 0x6, 0x401, 0x9, [{0xa156, 0x8, 0x2, 0x0, 0x0, 0x1004}, {0x181e80000, 0x9, 0x9}, {0x3, 0xd7f, 0x0, 0x0, 0x0, 0x400}, {0xcf2, 0x7, 0x77, 0x0, 0x0, 0x200}, {0xb9, 0x3, 0x3ff, 0x0, 0x0, 0x10b}, {0x8, 0x7e, 0x100000000, 0x0, 0x0, 0x2088}, {0x7, 0xddf4, 0xffff, 0x0, 0x0, 0x402}, {0x8001, 0x5, 0x7, 0x0, 0x0, 0x80}, {0x100000001, 0x6, 0x3, 0x0, 0x0, 0x200}]}) 00:19:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:15 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xffffff8d, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:15 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x717000, 0x0, 0x0, 0x0) 00:19:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local, 'hsr0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) 00:19:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x8, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:15 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xfffffff5, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:15 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x100000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x10, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x760000, 0x0, 0x0, 0x0) 00:19:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x200000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 250.054282][T14507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 00:19:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000027000568d25a80648c63940d0124fc000c00044002000000053582c137153e370300000000f01700d1bd", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0xfff, 0x100, 0x7fffffff}) [ 250.098580][T14507] FAT-fs (loop5): Filesystem has been set read-only 00:19:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4206, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 250.176276][T14507] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x300000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 250.235215][T14631] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 250.258407][T14507] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 250.273425][T14631] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.321306][T14507] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 250.376566][T14713] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 250.379917][T14505] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 250.411615][T14713] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:16 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x80ffff, 0x0, 0x0, 0x0) 00:19:16 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x480242, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) ioctl$void(r0, 0x5450) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x9, 0xc0f4, 0x5, 0x200}) 00:19:16 executing program 3: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000104ff00fd435463e4af645515b81e0008000100010423dcffdf00", 0x166) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @multicast1}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="d04ed82395f279132bf15abbff1c93d001cc625667", 0x15}], 0x1, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x9, @rand_addr=0x10001}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x38, 0x6, 0x0, 0x204000000, [{[@rand_addr=0x6], 0x800}, {[@rand_addr=0xdb], 0x9}, {[@broadcast], 0x525d}, {[@multicast1], 0x2}, {[@loopback], 0x6}, {[@loopback], 0x4}, {[], 0x8000}]}, @ssrr={0x89, 0x23, 0x0, [@empty, @loopback, @broadcast, @local, @empty, @loopback, @multicast2, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x110}, 0x40000) close(r0) 00:19:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4207, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x400000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 250.604364][T14758] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x700000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:16 executing program 0: setrlimit(0x8, &(0x7f0000000600)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}}, &(0x7f0000e6bffc)='GPL\xfb', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140)) [ 250.650307][T14758] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.685831][T14758] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x203, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x960000, 0x0, 0x0, 0x0) [ 250.763981][T14843] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 00:19:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x800000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:16 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2200000087) bind$inet(r0, &(0x7f0000000300)={0x2, 0x1004e20, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) recvfrom$unix(r0, 0x0, 0x107, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 00:19:17 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)={0x20, 0x3, 0x5, 0x0, 0x4, 0x9260, 0x7f, 0x2, 0x3, 0x423a, 0x5, 0x81, 0x0, 0x7, 0x1ff, 0xfffffffffffffff9, 0x9, 0x29, 0x8}) r1 = socket$netlink(0x10, 0x3, 0x1e) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001000030468fe07002b0000000000ffec24000000450001070000001419001a00030002000e00010009000300"/57, 0x39}], 0x1) 00:19:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xe07000, 0x0, 0x0, 0x0) 00:19:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() close(r0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ptrace(0x10, r2) openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dsp\x00', 0x200, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80800, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/77, 0x4d}], 0x8, &(0x7f0000000340)=""/41, 0x29}, 0x100) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) 00:19:17 executing program 3: mlockall(0x7) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x100) write$UHID_CREATE(r0, &(0x7f0000001040)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/4096, 0x1000, 0x0, 0x6, 0x1f70000000000000, 0x7f, 0x8}, 0x120) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001180)=@assoc_value, &(0x7f00000011c0)=0x8) 00:19:17 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x900000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:17 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xa00000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:17 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r2) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40)}}], 0x2, 0x62, 0x0) r6 = syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$net_dm(0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x401, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0x20}}, 0x1) fallocate(r3, 0x8, 0x477, 0x7716) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x45d}) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @local}}], 0x2c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) 00:19:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r2 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="16349df62f13341f0d09c62ee15a6bea9149dc4ff8fc32902120df45df60f6975bc47e690f31e4c9e7e5b3676df61f89555201e7b5dcd476356b72224ed76dd73d551410f8cc25ffa32a1058e04508ae3e8c691841d1a37266135dea8d10383af3e072815eac1ca1c73231362125f6a4", 0x70, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)='bdev[\x00') 00:19:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xf05000, 0x0, 0x0, 0x0) 00:19:17 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xe00000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 251.884075][T15118] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 00:19:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0xff030000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KDMKTONE(r1, 0x4b30, 0x0) [ 251.950506][T15118] FAT-fs (loop5): Filesystem has been set read-only [ 252.041932][T15118] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 252.120267][T15118] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) socket$packet(0x11, 0x3, 0x300) 00:19:18 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x1300000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x1000000, 0x0, 0x0, 0x0) 00:19:18 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:18 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000180)={{0x165, 0x49}, {0x2, 0x7fffffff}, 0x5, 0x6fdd3d6f1211d4f2, 0x3}) [ 252.164595][T15118] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 252.199308][T15097] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:18 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x2000000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:18 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r2, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='&\x00', 0x2, 0x2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xc020660b, 0x0) 00:19:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x2000000, 0x0, 0x0, 0x0) 00:19:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x4000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x200}}, [0x4, 0xa7ac459, 0x6, 0x100, 0x101, 0x3, 0x5, 0x80000000, 0x100, 0x7, 0x5a4d4476, 0x6, 0x0, 0x101, 0x9]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r3, 0x2}, &(0x7f0000000240)=0x8) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 252.570184][T15304] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 00:19:18 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x3f00000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 252.667967][T15304] FAT-fs (loop5): Filesystem has been set read-only [ 252.685220][T15304] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 252.729444][T15304] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000200)={0x7, r2, 0x1}) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x14, 0x41143053, 0x7, 0x6, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_address={0x3, 0x7, 0x32, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}]}, 0x30}}, 0x4000) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000180)={0x1, 0x0, {0x3, 0x6, 0x3011, 0x9, 0xd899318c8d645b72, 0xc, 0x0, 0x7}}) [ 252.784914][T15304] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 252.870177][T15277] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2000000000002, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81804) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) syz_open_dev$dri(&(0x7f0000000600)='/dev/dri/card#\x00', 0x9, 0x100000004400) r3 = accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) sendmsg$TIPC_NL_BEARER_ADD(r2, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000004c0)=""/182, 0xb6) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, 0x0) r5 = dup2(r1, 0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000580)=0x2) 00:19:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x3000000, 0x0, 0x0, 0x0) 00:19:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x4000000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:19 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x2000010, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40000, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x8, 0x4, 0x7d9, 0x8}}) 00:19:19 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0xb}, @func={0x9}, @ptr={0xe}, @typedef={0x3}]}, {0x0, [0x61, 0x0, 0x0, 0x0]}}, 0x0, 0x4e}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) sendmsg$inet6(r1, &(0x7f0000000780)={&(0x7f0000000640)={0xa, 0x4e20, 0x10000, @empty}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000680)="3c5d63fcc84241b886aa00e485697543b748c04121d223add425520cbd9526f0af8fda8de2ba635037133d5554b651b33f3121cb25bac573167c54ab2a7b64736727287eefcef495903a728367e263f7cf6319db603997c82e", 0x59}], 0x1, &(0x7f0000000740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="a57831892a27627b4275d2181b511919f4ce015630882207bd5aed5811c0", 0x1e, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r3, 0x54, 0x1c}, &(0x7f0000000480)={'enc=', 'oaep', ' hash=', {'sha1-ce\x00'}}, &(0x7f0000000500)="62d6f42bcb893332943d33f4e95fcc705bdc8cb2d2d8fbef7041fdf319fffb49a1ee769cd99c0e4a260f4b573c4fca9c4d7b7fab4f2b64953ce36df053b25cddf7ce1852344d3d10b16f514cf8b79a4cb993c961", &(0x7f00000003c0)="58f7158586898368a7ca487a0b97ebc3260011dfcad3faf414b3000b") ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x244000, 0xc0) getsockopt$inet6_opts(r4, 0x29, 0x3f, &(0x7f00000005c0)=""/50, &(0x7f0000000600)=0x32) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) write$P9_RSYMLINK(r1, &(0x7f00000007c0)={0x14, 0x11, 0x2, {0x18, 0x0, 0x1}}, 0x14) accept4$unix(r5, &(0x7f0000000200), &(0x7f0000000100)=0x6e, 0x800) [ 253.212976][T15453] device nr0 entered promiscuous mode 00:19:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x5800000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000000c0)) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x8, @empty, 0x4}}, 0x4, 0x0, 0x6, 0x1, 0x66}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e20, 0x6, @ipv4={[], [], @local}, 0x8}}, 0x0, 0x1, 0x2, 0x0, 0x4}, &(0x7f00000002c0)=0x98) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 253.346544][T15509] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 253.371717][T15509] FAT-fs (loop5): Filesystem has been set read-only [ 253.380978][T15509] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 253.390284][T15509] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 253.437021][T15509] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 253.467402][T15416] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x5c00000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000540)="11dca50d5e0bcfe47bf070") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0x5c, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [{[], {0x8100, 0x9, 0x0, 0x3}}], {@llc_tr={0x11, {@llc={0xbc, 0x7e, "b7", "d11d3c0a5fb7ea08168520bd86b261904fe0aab4ec26d84afec0cab2674330180184c0a0bb46d29c682f37e065a5cf177f14a330b9bd16d82efff844c9f0b207eab17c7e171074"}}}}}, &(0x7f0000000480)={0x0, 0x703, [0x77c, 0x354, 0xc04, 0xd9d]}) timer_create(0x5, &(0x7f0000000300)={0x0, 0x6, 0x6, @thr={&(0x7f00000001c0)="46d4bfd950061123cb5a1637ec9dc7f28302313503e1aae9e7b124531474e9b187f77a0bafe1eb601c5c0e9b0d4095cb35e88989d890065b1439", &(0x7f0000000200)="6e4dac685f94c2f1d724686127bfd07a8d59b32775600c10d6f8f148cbbbf17f17c1ebcbe3ea05825e77e217c86e47dcc568b6156f058102e4987252e49a113e6ff9e035491a0c32041154686b3534478170376828596afdd39c25c32138e6c0d1b4a74ea5728302ca2222c7504c29294cd4d28fe700aae905f6cbb171057713188f147f056122d926fc9ff44a9d7e67ca83e5a7ca236b9271448d92471e859bb7456662ddbd2456cf536eb02015984524b48e561d6031618f10e82bd3225f9a3d091470b94c8f43b45085a6152f2f80d009d188d939e323e5a4156c8e5fce14190c02d848c2479eff1c30"}}, &(0x7f0000000340)=0x0) timer_gettime(r2, &(0x7f0000000380)) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x280, 0x0) connect$caif(r3, &(0x7f00000000c0)=@rfm={0x25, 0x3, "8316ea86e2f989fd365108f08ae70839"}, 0x18) ioctl$TIOCSTI(r3, 0x5412, 0x2) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000003c0)) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000180)=@default) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000580)=""/149, 0xfffffd1f) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000100)) 00:19:19 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x4000000, 0x0, 0x0, 0x0) [ 253.628945][T15656] device nr0 entered promiscuous mode 00:19:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x6000000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:19 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uhid\x00', 0x0, 0x0) poll(&(0x7f00000005c0)=[{r0}], 0x1, 0x0) 00:19:19 executing program 3: r0 = socket$unix(0x1, 0x10000000005, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4}, {r0}], 0x2, 0x0) poll(&(0x7f0000000180)=[{r0, 0x4}, {r0, 0x2}], 0x2, 0x4c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfb, 0x0, 0x0, 0x800e00a86) poll(&(0x7f0000000080)=[{}, {}], 0x20000000000001de, 0x1ff) shutdown(r1, 0x0) 00:19:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x7f00000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9b49, 0x400100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000080)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:20 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x8dffffff00000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:20 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xc05d000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000700)="d0cfcf2112d358036249d314ba81f2155835640133d671f01626bc948163303c3e3d07990fbe128af288f5a72da3607e18507ec60169cc7206046cd0ebfd5c14f6a7ead5b5d8afb5142650f6e3ef605161e6a03aeca5ae814eb8a7e886ec2fe95fb4199a3c6144422c648fd0e5e4e7b354168e2027d00347ee052a88944f425e2261304396b716e183f6a383dd6ae8c91b81f3548491be704fa3c939f4457177cf938f849d7601d3bb585b31af4605832ed86e34d69968722c6787a8312e20dd1bd5ae5d22c554f8babca2e0677864736029820d9ca435578237866b0df785812db9095ce7537d61a7ce8e2caf15e79a975b7af6bf0c5e72ae98db5f5d", 0xfd) rt_sigtimedwait(&(0x7f00000000c0)={0x800}, &(0x7f0000000100), &(0x7f0000000240)={r1, r2+30000000}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() getrlimit(0x6, &(0x7f0000000540)) r5 = open(&(0x7f0000000280)='./file0\x00', 0x200000, 0x0) ioctl$TIOCSSERIAL(r5, 0x541f, &(0x7f0000000300)={0x8, 0x100000001, 0x3, 0x2, 0x6, 0x8, 0x9296, 0x3, 0x3, 0x723, 0x40, 0x4, 0x7b, 0xb6ab, &(0x7f00000002c0)=""/48, 0x10000, 0x0, 0x8}) rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000000)) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f00000001c0)) ioctl$KDGETLED(r6, 0x4b31, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000640)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r7, r5}}, 0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0x204, 0x0, 0x6, 0x4}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000440)={r8, @in6={{0xa, 0x4e23, 0x8c, @empty, 0x816}}}, &(0x7f0000000500)=0x84) 00:19:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x5000000, 0x0, 0x0, 0x0) 00:19:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x1c, 0x0, "be3c14b311365e862b4ea3b0adb8a0b9cdfc27a8d0afadf13c5972ea066c48945f1a6eaa7213124313cf370f04f1de2f8291f3ed96afc99089473c7dde35b93ff29f25f1c613a66ca7a4619d24887610"}, 0xd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x84000000002c00) 00:19:20 executing program 0: r0 = gettid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101000, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) open(&(0x7f0000000580)='./file0\x00', 0x4800, 0x104) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000004c0)={0x7, 0xfff}) write$FUSE_LK(r1, &(0x7f00000005c0)={0x28, 0x0, 0x3, {{0x2, 0x6, 0x0, r0}}}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000400)='\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r0, 0x0) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x80000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)=ANY=[], 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x84100, 0x0) geteuid() ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000000c0)=0xdc4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000006c0)="af6ca59bfc582462caa9af78f490dab6a5f45aae3ce9c7af3ba55754d880d3c8f8ed0b9e42aa2666bfde3e5583bcd88d7ea6b0f79a0b25cad9529ec04da6eef3d42d1a8e62cb96ddf2b8b0703cac29ea10da09237166fa6cdc5ec8525c6a7ba4c6cef09b2da2fb1c0f1a12061f8abe47b228b92b0352160304151d6888af48b80e30a58f8657ca6fe72472efa75b3910d53d8bdc850c86c5add06f47e062fb192e9a155b030883f2e12fb81b7b5d1521e4b116fcc8263ba0a3e003f5e56897724bfef883288b8f6ca3e311d5c7c502866d7b39f7785a349f64082d2457", 0xdd, 0xfffffffffffffffc) r5 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0x0) keyctl$instantiate(0xc, r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="75706461746520566566010000000000002773746564ba0000"], 0x1, r5) tgkill(r0, r2, 0x23) getpeername$inet(r3, &(0x7f0000000500)={0x2, 0x0, @local}, &(0x7f0000000540)=0x10) getrandom(&(0x7f0000000040)=""/59, 0xfe63, 0x1) 00:19:20 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xe803000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:20 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x6000000, 0x0, 0x0, 0x0) 00:19:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x6, @remote}, 0x4c, {0x2, 0x4e21, @broadcast}, 'syzkaller1\x00'}) 00:19:20 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xf401000000000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) [ 254.917111][T16015] IPVS: ftp: loaded support on port[0] = 21 00:19:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7000000, 0x0, 0x0, 0x0) 00:19:21 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xf5ffffff00000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) 00:19:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xcf, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000000c0)) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', r4}) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000200)={0x5, 0x4bf, 0xfd, &(0x7f00000003c0)="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"}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000001c0)=0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0200a000b9d9177da3c52e75c7f34060038e19c4009b6bf59b0ae2180d2815502a1c5b981ddfe96409b0a90e1af1e57634ac03736236318f305a62a363ca4a6d12b615ca909b739dabd3926c9bacc75744ca1afc1715359feddad694c1418c90903513cee5d2bc2df7f6cde977b2c7da804ab46326e67aabf97d172bfccf8f1626babc738fd3dc5ab7588c371b1fcefd0dc9ea0cd12f7450e04900"/166], 0xa8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000240)=r5, 0x4) creat(&(0x7f0000000540)='./file0\x00', 0x164) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 255.408115][T16153] IPVS: ftp: loaded support on port[0] = 21 00:19:21 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0xffffffff00000000, @dev={0xfe, 0x80, [0x700000000000000], 0xf}}, 0x1c) 00:19:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000140)=0x80, 0x800) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x4c, "fbdec1206197b895fbb523c8a3a2fe20d9b9b8a93485e6fde1e58fc33a6bb9a655f3914e02db5cb4eb2ac810425f7c990408bc38b285ab0e2de0fe1cbf6f859fd5db3fbd81b8d4e1d14bc504"}, &(0x7f00000003c0)=0x54) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={r2, 0x2c, &(0x7f0000000400)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x81, @remote, 0x8001}]}, &(0x7f0000000580)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r4 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x2, 0x2) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) bind$can_raw(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r7, 0x80000001}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180)={r8, 0xf9}, 0x8) 00:19:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x1eac37f5}, 0x10) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) getsockopt$sock_timeval(r2, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x55864b6356183c8, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 00:19:22 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x100000000000000], 0xf}}, 0x1c) 00:19:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x20000000, 0x0, 0x0, 0x0) 00:19:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x0) 00:19:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000003c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x401, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f00000002c0), &(0x7f0000000280)=0x83) [ 256.493706][T16285] QAT: Invalid ioctl 00:19:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x200000000000000], 0xf}}, 0x1c) 00:19:22 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x200) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x5, 0x8, 0x0, 0x0, 0x0, [], [], [], 0x6, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}}}, 0x10) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x9) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000002], 0xf}}, 0x1c) 00:19:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x40000000, 0x0, 0x0, 0x0) 00:19:22 executing program 0: 00:19:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x50000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4767909f) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000003], 0xf}}, 0x1c) 00:19:23 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:23 executing program 0: 00:19:23 executing program 3: 00:19:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000000016, &(0x7f0000000100)={0x0, 0xfffffffffffffeff}) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:23 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000004], 0xf}}, 0x1c) 00:19:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7e000000, 0x0, 0x0, 0x0) 00:19:23 executing program 0: 00:19:23 executing program 3: 00:19:23 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000007], 0xf}}, 0x1c) 00:19:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x7, &(0x7f0000000100)={0x0, 0x800000000, 0x2f}) ptrace(0x10, r1) r2 = socket(0x8, 0x80000, 0x400) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0xc4c, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:23 executing program 0: 00:19:23 executing program 3: 00:19:24 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:24 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000008], 0xf}}, 0x1c) 00:19:24 executing program 0: 00:19:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xff600000, 0x0, 0x0, 0x0) 00:19:24 executing program 3: 00:19:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) dup2(r0, r0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:24 executing program 0: 00:19:24 executing program 3: 00:19:24 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000009], 0xf}}, 0x1c) 00:19:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r2, &(0x7f0000000140)='comm\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = dup(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0x4) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000180)=""/206) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000000)) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:24 executing program 0: 00:19:24 executing program 3: [ 258.760789][T17013] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 258.780105][T17013] FAT-fs (loop5): Filesystem has been set read-only [ 258.789413][T17013] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:24 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:24 executing program 3: 00:19:24 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000000000000a], 0xf}}, 0x1c) 00:19:24 executing program 0: 00:19:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xffff8000, 0x0, 0x0, 0x0) [ 258.810654][T17002] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:24 executing program 3: 00:19:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = dup(r0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/100) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:24 executing program 0: 00:19:25 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000000000000e], 0xf}}, 0x1c) 00:19:25 executing program 3: 00:19:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x2000000000, 0x0, 0x0, 0x0) 00:19:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 00:19:25 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:25 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000013], 0xf}}, 0x1c) 00:19:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x400000) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="29bd9a4629f860e92fedc84751371da2c1255d55787753c5dc", 0x20000019}, {&(0x7f00000001c0)="39ea4b21f568b0731f", 0x200001c9}, {&(0x7f0000000480)="257ccda44ca85eb68486eb13d8fd9216aa5a01af3235c2a474671f47b75327", 0x1f}], 0x3}}], 0x1, 0x0) 00:19:25 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6800, 0x0) 00:19:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x400000000000, 0x0, 0x0, 0x0) 00:19:25 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6800, 0x0) 00:19:25 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000058], 0xf}}, 0x1c) 00:19:25 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r0, 0xe, &(0x7f0000000100)={0x6, 0xa}, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000480)={0x4, 0x800, 0xec0, @broadcast, 'veth0\x00'}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000180)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 00:19:26 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 00:19:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x55555714d000, 0x0, 0x0, 0x0) 00:19:26 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000000000005c], 0xf}}, 0x1c) 00:19:26 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:26 executing program 1: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0xfffffffffffffffa, 0x8000) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000340)) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) ptrace(0x10, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x20000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000002c0)=0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="e0000000df98a603a4a0c3035d829d5dc0346b7c697aa9a20f4ba2d06d6aed6de57a1c28a8d250f5c8226ac59890bc6516101b1e1b2a449a9408a69613b816999748bb596585f313c39a7086a9296a02f806daa9af561b59dc459dce61dc1648735db62fed8d7985b920dfdf4de944fe1040bc258028bca5d8b70447398df60e10ce1e4910f170f59680fbfa21c6bc4f97381bd6a3ae50e900756f3dcbd2018cd520b3f03ff7983ad40e2b2aaf88ffc485109236fa5e9c860980496f43ffff52d136cadeeb92d549ba3f7ff74da8fad68d87b11abc570ccf1ddcd3b98e86395f4d8d5d23"], &(0x7f0000000140)=0xe8) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x55555716f000, 0x0, 0x0, 0x0) 00:19:26 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000060], 0xf}}, 0x1c) 00:19:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x55864b6356183c8, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 00:19:26 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000058], 0xf}}, 0x1c) 00:19:26 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:26 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000000001f4], 0xf}}, 0x1c) 00:19:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x1}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x10001, 0x20d, 0x4, 0x1, 0x2, 0x4, 0x1, r3}, &(0x7f0000000280)=0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r2, 0x1f, 0x1, 0x40, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) prctl$PR_SET_TSC(0x1a, 0x3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000400000, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f00000000c0)) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xc0001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00\x00\x00\x00\x04\x00', 0x0}) [ 261.068031][T17537] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 00:19:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x60ffffffffff, 0x0, 0x0, 0x0) 00:19:27 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000300], 0xf}}, 0x1c) [ 261.140893][T17537] FAT-fs (loop5): Filesystem has been set read-only [ 261.169913][T17537] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 261.206753][T17537] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 261.257180][T17537] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 261.344827][T17535] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:27 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:27 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000000001f4], 0xf}}, 0x1c) 00:19:27 executing program 1: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ff1000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0x4010, r3) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5aa, 0x0) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000140)=""/78) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:27 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000000003e8], 0xf}}, 0x1c) 00:19:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x760000000000, 0x0, 0x0, 0x0) 00:19:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) fallocate(r1, 0x20, 0x55, 0x81) 00:19:27 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_sigpending(&(0x7f0000000080), 0x8) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x7) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:27 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000700], 0xf}}, 0x1c) 00:19:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7fdc88e18000, 0x0, 0x0, 0x0) 00:19:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x38, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xf00}]) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x20, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) 00:19:27 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000900], 0xf}}, 0x1c) 00:19:28 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x4600, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xd0, "0c7403f14714165e93632aaa6f6eed35b1cd0275892fbeceac3ee330480ddc2612e23e54508d612bfb202160f6dd0d36e109824c96366f1f76621b86b6cda477adac542b4c2ec1a9408fda6c3c2ba5a905c4691ce816272ed3aa45aa80e04a60f3301536106e44c198a073c293878362db56d9393700929167ed2baedcff65122f0b2199a7758910315a143814884216dbb909a2aafc700a93b49b32c73bcf575a678616929a057cee93d476c531e29d4ed3239a0dea0d972ecd3c8edc9d328747147c535d6d979acfaa6ca0ec69c0a2"}, &(0x7f00000001c0)=0xd8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001140)={r3, 0x1000, "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"}, &(0x7f0000000200)=0x1008) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xac, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xa}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xac}}, 0x4000000) 00:19:28 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003180)='/dev/vga_arbiter\x00', 0x400000000240201, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000032c0)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000003300)={@empty, r2}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002fc0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000030c0)=0xe8) r4 = syz_open_dev$usbmon(&(0x7f0000002ec0)='/dev/usbmon#\x00', 0x9, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x7fc, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002f80)={'vcan0\x00', r3}) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000002f40)={0x6, &(0x7f0000002f00)=[{0x1000, 0x1, 0x9c, 0xffffffffffffff98}, {0x43, 0x3, 0x4, 0xb83}, {0x80, 0x4, 0x100000001, 0x4}, {0x6cf3, 0x8, 0x0, 0x8}, {0x7f, 0x2a5, 0x3f, 0x8}, {0x9, 0x10001, 0x100000001}]}) recvmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/53, 0x35}], 0x1, &(0x7f0000000180)=""/18, 0x12}, 0x6}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/211, 0xd3}, {&(0x7f0000001600)=""/100, 0x64}, {&(0x7f0000001680)=""/236, 0xec}], 0x9, &(0x7f0000001840)=""/162, 0xa2}, 0x40}, {{&(0x7f0000001900)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001980)=""/119, 0x77}, {&(0x7f0000001a00)=""/114, 0x72}, {&(0x7f0000001a80)=""/200, 0xc8}, {&(0x7f0000001b80)=""/208, 0xd0}, {&(0x7f0000001c80)=""/85, 0x55}, {&(0x7f0000001d00)=""/157, 0x9d}, {&(0x7f0000001dc0)=""/232, 0xe8}, {&(0x7f0000001ec0)=""/241, 0xf1}, {&(0x7f0000001fc0)=""/65, 0x41}, {&(0x7f0000002040)=""/80, 0x50}], 0xa, &(0x7f0000002180)=""/22, 0x16}, 0x9}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000021c0)=""/93, 0x5d}, {&(0x7f0000002240)=""/6, 0x6}, {&(0x7f0000002280)=""/36, 0x24}, {&(0x7f00000022c0)=""/49, 0x31}, {&(0x7f0000002300)=""/203, 0xcb}], 0x5, &(0x7f0000002480)=""/125, 0x7d}, 0x3f}, {{&(0x7f0000002500)=@ax25={{0x3, @bcast}, [@null, @rose, @null, @default, @rose, @netrom, @default, @rose]}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002580)=""/93, 0x5d}, {&(0x7f0000002600)=""/146, 0x92}, {&(0x7f00000026c0)=""/162, 0xa2}, {&(0x7f0000002780)=""/143, 0x8f}], 0x4}, 0x401}, {{&(0x7f0000002880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002900)=""/116, 0x74}, {&(0x7f0000002980)=""/131, 0x83}, {&(0x7f0000002a40)=""/240, 0xf0}, {&(0x7f0000002b40)=""/155, 0x9b}], 0x4, &(0x7f0000002c40)=""/129, 0x81}, 0x6}], 0x6, 0x60, &(0x7f0000002e80)={0x77359400}) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x32, &(0x7f0000000100)=0x1000000, 0x4) 00:19:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7fffffffefff, 0x0, 0x0, 0x0) 00:19:28 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000a00], 0xf}}, 0x1c) 00:19:28 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000e00], 0xf}}, 0x1c) 00:19:28 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x100) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)) 00:19:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000180)={0x1, [0x0]}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x80000001, 0x27, 0x9, 0x81, 0x0, 0x0, 0x10, 0x1, 0xfffffffffffffffa, 0x5, 0x4, 0x20, 0x546, 0x101, 0x9, 0x4, 0x9, 0x7, 0x793286ae, 0x6, 0x3ff, 0x3d39, 0x7c98, 0x8, 0x0, 0x2ed, 0x3, 0x8, 0x0, 0x2, 0x0, 0x9, 0x4, 0x5, 0x6, 0x8001, 0x0, 0x20, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8408, 0x9, 0x81, 0x5, 0x9, 0x9, 0x7}, r1, 0xffffffffffffffff, r2, 0x2) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x960000000000, 0x0, 0x0, 0x0) 00:19:28 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000001300], 0xf}}, 0x1c) 00:19:28 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000002000], 0xf}}, 0x1c) 00:19:29 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @multicast2}}) 00:19:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) clone(0x400, &(0x7f0000000080)="af63c665649a3e19ffd2d66199c486970bb2c992fa0347f93fd0de970f1c0e2a4e566e1cd3912ca6e55f6d8a3ae319acc501a5f1bc2f17b231e99f3e182eeb965aef80dd7bd043cbfd2d70805dd0db04707384bdc8898a4bc8a2e60f63aaa7c74dc9347a605f9ada1d544b23cc3015f2619fa2ba6bc6aa68002193bd97e9c6b368e1a7120e36d76e17dde0dab604f7a4b0ebc67d8899ae963933b5c0f927dd1afbf298d6a6e68315eb928644aa784f1f7e493d0d3d86db8e6a21e757ea6388185216e43d9c0c3185e900107a9d4b70100b89b20db66a1a3f98d505f560961203ed3e22c614211b96c10df41ce887db479f58d27ae6", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a66c4b67dde15d1be9e4254b10208f9069d3ee27312ea6fb31f005dccd1ff934552bfe3d73005535425c8ae81c216ff90bd9d8f2ad59e8a98840ddaa69a86ea00ac1931d5fad73a252a8cd60b73d75bb466d0a8cf2ebfd41f3f2a5210d2250f7eb6c833640a03265857d3a1ad2f1cd5b023bc8ae39ad9bde83a77ae4b1a4700938279fe242e1d169ebc82b104b053ce6dfdd8f09a902df103ce540cc3b393028e902aa280e71ecdbe0ea9ec4cec4ae022aa11d601906fe0800c35f715ad1") ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:29 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000003f00], 0xf}}, 0x1c) 00:19:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x20000000000000, 0x0, 0x0, 0x0) [ 263.307877][T18077] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 263.328096][T18077] FAT-fs (loop0): Filesystem has been set read-only [ 263.338287][T18077] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 263.369270][T18086] Unknown ioctl 21383 [ 263.397171][T18077] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 263.427246][T18095] Unknown ioctl 21383 00:19:29 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000004000], 0xf}}, 0x1c) [ 263.464332][T18077] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 263.555686][T18074] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:19:29 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) 00:19:29 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000380)=0x6e) pipe2(0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000500)) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) getegid() r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3, 0x2, [0x7f, 0x3]}, &(0x7f00000003c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000008c0)={r6, 0x3ff, 0x2, [0x400, 0x4]}, 0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000480)={r6, 0x10001}, &(0x7f00000004c0)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = dup3(r0, r2, 0x80000) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f0000000540)='gfs2\x00', &(0x7f0000000580)='./file0\x00', 0x2, 0x2, &(0x7f0000000680)=[{&(0x7f00000005c0)="952372831b87855f82c425e08d6ae38f6f3cdb0c0db986916bc4ba486ed17dd563ffde0be58617535dd8b4c8eae3e9dc35274d17d188a8b9319fd25a5b3669fcf676658557695330d8331803cb923a18011ac5f588731d077c503ef3d9aa8fbc47733d8fee3f52810b48258440b4a5a225686e532587391ca3ced8dba9368597", 0x80, 0xfffffffffffff4e6}, {&(0x7f0000000640)="78f6e608726bdb713dd8b252e3ac88bff9963a44544b050e656a4d63d4e2334e00febab248e6b5940991a4130219c5943f48cf7b98cdb1a44442", 0x3a, 0x8}], 0x40000, &(0x7f0000000740)={[{@lockproto_dlm='lockproto=dlm'}, {@nobarrier='nobarrier'}, {@localflocks='localflocks'}, {@discard='discard'}, {@lockproto_dlm='lockproto=dlm'}], [{@obj_type={'obj_type', 0x3d, '/dev/dlm-monitor\x00'}}, {@subj_role={'subj_role', 0x3d, '\\^%wlan0@:)^'}}, {@audit='audit'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@subj_type={'subj_type', 0x3d, '/dev/dlm-monitor\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x5b3a}}]}) setsockopt$inet_int(r7, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000840)=""/57, &(0x7f0000000880)=0x39) r9 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x223) recvfrom$unix(r1, &(0x7f00000001c0)=""/245, 0xf5, 0x1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 00:19:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x70710000000000, 0x0, 0x0, 0x0) 00:19:29 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000005800], 0xf}}, 0x1c) 00:19:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000080)={0x3, 0x2, 0xffffffff}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:29 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000005c00], 0xf}}, 0x1c) [ 263.848139][T18222] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 263.960465][T18222] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 00:19:30 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x111201, 0x0) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f00000000c0)=0x1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x1, 0x6000) 00:19:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x80e188dc7f0000, 0x0, 0x0, 0x0) 00:19:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x71, 0x10, 0x28}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x390, 0xf8, 0x1e8, 0x0, 0x1e8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x400, [0x4, 0x9, 0xffffffff, 0xffffffffffffffe0, 0x28, 0x1000], 0x1ff, 0x8001}, {0xbc, [0x2, 0x4, 0x4, 0x139, 0x2, 0x1], 0x1, 0x5}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x200, 0xff}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x67, 0x2, 0x75}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x2, 0x1, 0x1, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 00:19:30 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000005dc0], 0xf}}, 0x1c) 00:19:30 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000006000], 0xf}}, 0x1c) 00:19:30 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) 00:19:30 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000}) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = syz_open_dev$vcsa(&(0x7f0000000700)='/dev/vcsa#\x00', 0x400000000000, 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x13f, 0x9}}, 0x20) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) r8 = getgid() fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) r10 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_UIE_OFF(r10, 0x7004) sendmsg$netlink(r0, &(0x7f00000006c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r5}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}], 0xb0, 0x20000000}, 0x0) 00:19:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000080)='smaps_rollup\x00') rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x1000}) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000280)=""/104) fstat(r0, &(0x7f0000000140)) 00:19:30 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000007f00], 0xf}}, 0x1c) 00:19:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0) 00:19:30 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000000000c05d], 0xf}}, 0x1c) 00:19:31 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x1, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x100, 0x610300) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'ifb0\x00', 0x400}) clone(0x41f9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x434}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) 00:19:31 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000000000e803], 0xf}}, 0x1c) 00:19:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xd0145755550000, 0x0, 0x0, 0x0) 00:19:31 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000000000f401], 0xf}}, 0x1c) 00:19:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpgrp(0x0) geteuid() stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x82, 0x10000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000001c0)={0x1, 0x100, 0xf4000000, 0xfffffffffffffff8}) accept$packet(r1, 0x0, &(0x7f0000000200)) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:31 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 266.954986][ T296] device bridge_slave_1 left promiscuous mode [ 266.961188][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.003909][ T296] device bridge_slave_0 left promiscuous mode [ 267.010090][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.764147][ T296] device hsr_slave_0 left promiscuous mode [ 267.803351][ T296] device hsr_slave_1 left promiscuous mode [ 267.848789][ T296] team0 (unregistering): Port device team_slave_1 removed [ 267.863425][ T296] team0 (unregistering): Port device team_slave_0 removed [ 267.872674][ T296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.947392][ T296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.030486][ T296] bond0 (unregistering): Released all slaves [ 268.129113][T18621] IPVS: ftp: loaded support on port[0] = 21 [ 268.186686][T18621] chnl_net:caif_netlink_parms(): no params data found [ 268.215193][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.222293][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.230334][T18621] device bridge_slave_0 entered promiscuous mode [ 268.237749][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.245051][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.252540][T18621] device bridge_slave_1 entered promiscuous mode [ 268.268846][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.279276][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.358063][T18621] team0: Port device team_slave_0 added [ 268.365674][T18621] team0: Port device team_slave_1 added [ 268.438481][T18621] device hsr_slave_0 entered promiscuous mode [ 268.503468][T18621] device hsr_slave_1 entered promiscuous mode [ 268.543175][T18621] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.563818][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.570888][T18621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.578265][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.585338][T18621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.612749][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.622898][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.631818][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.640656][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.652953][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.663355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.671709][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.678806][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.698535][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.707736][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.714836][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.726495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.735229][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.746258][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.756653][T10265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.767995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.777808][T18621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.791143][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 00:19:34 executing program 3: r0 = inotify_init() r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x80000) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0100002400020027bd7000ffdbdf251f00000075eb5ec2161e1caa41ea7d62d53c650eaaba2bc987c8576a98dd520e63ebb964a99ab17dbad51a97dacea7235c7c0208689ce3d5ef29ebef387bdd6322728278ef63ef4d11b2ab7beb4627c909f3713da2b155f2b0b03598c32899d2481ae90be6202640334e26739f0bb88fc529057647b97175d5b7a2e00df3c969224a1b20c61f1174b42296d5712cb9f531ab63a7c001be0301c905248a6eef841d3a49d23b04840ffa8de34cea786d52fbf48e3908319b96c05c94014a1675f197b571f0cc094662fda4ecb252eaac8de76d9719ad7052a8cc261060d9af030212ac000019cc4abd2689f00ccdab60e48fb60a3c72da0433cef0dc1a562ce1d36b318ac3c7f31c7cb823d248553b8a03f41011cb5059f3463f3d1266ce3fa8b9713f193b4a1dcf79d44d8b996b9ae1a5729d4e24cccb36d6086c0e2e80d53b5a68b7beb4e719020b070ad469b4c475fcaea2a728f356e36ced3e0a7ff4de6cc2150fd439db9eb52abad02318"], 0x17c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 00:19:34 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000001000000], 0xf}}, 0x1c) 00:19:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xe0700000000000, 0x0, 0x0, 0x0) 00:19:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x90000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12]) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000001140)=""/4096, 0x1000}) 00:19:34 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:34 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:35 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000002000000], 0xf}}, 0x1c) 00:19:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xf0165755550000, 0x0, 0x0, 0x0) [ 269.119990][T18637] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 00:19:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10001, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f00000000c0)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) restart_syscall() ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 269.183819][T18637] FAT-fs (loop5): Filesystem has been set read-only [ 269.206807][T18637] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000100)=""/216, 0xd8}], 0x1) syz_open_dev$evdev(&(0x7f0000012fee)='/.%v/\x11%put/event#\x00', 0x0, 0x0) 00:19:35 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000003000000], 0xf}}, 0x1c) [ 269.276955][T18632] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:35 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x36, &(0x7f0000000000)) ptrace(0x431c, r2) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x37, 0x100) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) ptrace(0x4207, r2) syz_open_procfs$namespace(r2, &(0x7f0000000680)='ns/pid_for_children\x00') writev(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="5fdfdd5cd2689e351087f42a039829da15ebeae3b34447a98de0e410c02bf588f7f879d15508fe21104296de0c560334428e5b03a99d0719f668fa4db5b84a409ff9722c3c99fd31d43e63ff96d275a0069fb662ec3de07614cf9a0f89d83d374b5f795ddceb6f54d857da8ae67b27b1160d75cd3fa912a5d16ba39914d107daacce2f1a9a5b717b911098756095b0f35fcc848d451cd8a7a3b4d2e4c17422c51066e6136888b05b2bf2cdffbd8e8bade8088d8f2e8918e68e2447eae6e90db9265e0139ce9099dea1847361d4bdc2b4b455e81a55de0fb87b476cbe9b588d7047cd127b07407b5eaf4724c4c821d0637fc312026791", 0xf6}, {&(0x7f00000001c0)="b2ae1c16f49a48be6e0a1453452916989d19c9123149293dfe4da58a97e761375b23d072842f2a797104e6ac7f73f4e77d3dcbe1a0a4abbd198c0b473d9cbf577af57e56f6675ce41f7058c1072571eeaded4c0c7dc9d33a0ca3683af447ea5b305fb099e396d2402e3c361798723b784810e562e09be1416ee10fb65e540df75c62a70fb2802ce2d73f001717abb4f4cca3b1383b627240af78653ac36320fcca49cdbf8e19ae59fd1269e0d8f69a4d8be525f2eef236ec714a51023b4cf67509e537ce97cb101fab4ee0692ccfec854aa5a6e60806d305c99db4b2075f2d883ac011064b7c8a47e2ad4c3d79", 0xed}, {&(0x7f00000002c0)="be5f9a0edb3b7672e99cf2b83a5cd6c419f32404b1e17121db6e3bf853d5fbb503155d", 0x23}, {&(0x7f0000000300)="2381462fdc668f8958cc3189206c369856e91a70eb7512003e89a761c1835316093ea3e5ecd6687211430d7aff138dc3c3958cf34c088a9e4a2e3d9873028e3b68e9283065a8bd3c03", 0x49}, {&(0x7f00000003c0)="5368bb7429b3186975d0d9295872505b6248c3beabbe2a12ef7b5f42ff1c5d58d111586992dabb403717b48065508d3b6efd13e7c2ba3edbe89e1f30a11cef195869837b026cb3dbb5fe38f5375f60c9e09f352e204d1060fea6c14e0a6ae89a6efe30253d", 0x65}, {&(0x7f0000000440)="263d7290254d5093cbb2f649e11d94788d8a7bd1a15728e3b978eee2b3a234e438102483f13d20af21a6b63fdc56cb70f36915218d3df5a3200f31a14cdc59fc057b689687c99218b0b28f5fca7aaf6b9dc4113a6420fdeefc46b41e6f828280fe6c006e2bdd40925ddd2eeb4dabd135c5c984ca7c85f665fc1a10c45dd7501eec2c52c7215867d24221e3f14387a88e5add581e8bfcdc5aaf679cd7f9d7f43d84aad1d4d4a0ba137885b1e4b22700bdf30cb83a61b39520cde778ed371dc211bf6fee54297d59283a71b50326ac", 0xce}, {&(0x7f0000000540)="75b374d7df450b9165656fcce12a969cf0c3901f4f0a3b25d63357b60e0f1c16a946225068be1062c335086e4f8947789719fcc7537acdfd4f991267ab78758485917f8781b0f8a27e32222cb95c9590a53530c66dfad91cf4da6123621a991ffb734480bb87ed6fafc06498da693551cb5fb06e18231b960f01678dbd27aaff41c75f0b90aeca", 0x87}], 0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/audio\x00', 0x880, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000700)) 00:19:35 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000004000000], 0xf}}, 0x1c) 00:19:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xf0500000000000, 0x0, 0x0, 0x0) 00:19:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200c0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x5, 0x400, 0x4, 0x70, 0x10, 0x40, 0x4c86172a, 0x9, 0x3, 0x1}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:35 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 269.769633][T18879] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 269.794773][T18879] FAT-fs (loop5): Filesystem has been set read-only [ 269.811328][T18879] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:35 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000007000000], 0xf}}, 0x1c) 00:19:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 269.836154][T18864] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:36 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000008000000], 0xf}}, 0x1c) 00:19:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 00:19:36 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xc0a019a, 0x4) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x400}, 0x8) listen(r0, 0x3) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r3, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 00:19:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) r9 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000b00)={0x5, {0x17b0, 0x20, 0x100000000, 0x3}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000d40)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="02000600", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=r9, @ANYBLOB="02000200", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="040005000000000008000400", @ANYRES32=r12, @ANYBLOB='\b\x00s(', @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="10000300000000002000010000000000"], 0x8c, 0x3) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) getresuid(&(0x7f0000000380), &(0x7f0000000b40), &(0x7f0000000b80)) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) getxattr(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)=@known='trusted.overlay.nlink\x00', &(0x7f0000000c40)=""/198, 0xc6) 00:19:36 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000009000000], 0xf}}, 0x1c) 00:19:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) 00:19:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41dc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r4 = dup3(r1, r0, 0x80000) r5 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x200, 0x80002) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000000c0)=r5) 00:19:36 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000000a000000], 0xf}}, 0x1c) 00:19:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x7, 0x200, 0x1, 0x100, 0x31d, 0xfffffffffffffffb, 0x1, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:36 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:36 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = fanotify_init(0x0, 0x0) syncfs(r0) fanotify_mark(r0, 0x1, 0x40000000, 0xffffffffffffffff, 0x0) fanotify_mark(r0, 0x41, 0x8000000, 0xffffffffffffffff, 0x0) 00:19:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:36 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000000e000000], 0xf}}, 0x1c) 00:19:36 executing program 3: clone(0x40080000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x31) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x80ff, 0x3}) setpriority(0x0, r0, 0x1) 00:19:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0xd0, 0x0, 0x220, 0x220, 0x378, 0x470, 0x470, 0x470, 0x470, 0x470, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @empty, @multicast2, @icmp_id=0x64, @port=0x4e24}}}}, {{@uncond, 0x0, 0x118, 0x150, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x7, 0x4f9}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x3, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x11, @multicast2, @multicast2, @icmp_id=0x67, @gre_key=0x800}}}}, {{@ip={@rand_addr=0xffffffffffffff80, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dummy0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x7f, 0x2}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0xa20, 0x200, 0x1, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x20d, 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x8001, 0x7fffffff, 0x400, 0x9a, 0x2, 0x7b2], 0x0, 0x1067}, {0x3, [0x6, 0x7, 0x3, 0x6, 0x1, 0x8b7], 0xf, 0x6}}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffffff, 'syzkaller1\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x10}, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0xe, [0x36, 0x2b, 0x39, 0x21, 0x29, 0x31, 0x7, 0x16, 0x34, 0x30, 0x19, 0x17, 0x15, 0x3f, 0x3c, 0x3c], 0x0, 0x8000, 0x4}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x300000000000000, 0x0, 0x0, 0x0) 00:19:37 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000013000000], 0xf}}, 0x1c) 00:19:37 executing program 3: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) sendfile(r0, r0, 0x0, 0x20002000002) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:19:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)={0x0, 0x4}) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x7, 0xd78, 0x40, 0x8, 0x16, 0xfffffffffffffff9, 0x100000001, 0x8, 0x53, 0x18fc, 0x401, 0x9}) 00:19:37 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000020000000], 0xf}}, 0x1c) 00:19:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 00:19:37 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:37 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000003f000000], 0xf}}, 0x1c) 00:19:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:37 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x215) 00:19:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x500000000000000, 0x0, 0x0, 0x0) 00:19:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() accept(r0, 0x0, &(0x7f0000000400)) rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000440)={0x0, 0x0, 0x4e8}) process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/248, 0xf8}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000200)=""/218, 0xda}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/13, 0xd}], 0x1, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:37 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000040000000], 0xf}}, 0x1c) 00:19:38 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000058000000], 0xf}}, 0x1c) 00:19:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x600000000000000, 0x0, 0x0, 0x0) 00:19:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x7, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="1813cf9ced2059c431b65a0116eb1712", 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x200000004001fd) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0x4}, 0x1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:38 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x1) pwrite64(r0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000040)={{0x7, @name="6e8fb08bb753541b2ea33b6e47c57a1b8e8aa835d01ae933e6797194384ab91e"}, "1be3d734c888c9bdde32e144beca5bf6acda2c0a582f1247c76c7ccf93436ef8", 0x2}) [ 272.350548][T19605] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 272.454187][T19605] FAT-fs (loop5): Filesystem has been set read-only [ 272.498850][T19605] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r1, &(0x7f0000000500)=""/175, 0x5d) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8001) getdents64(r1, &(0x7f0000000080)=""/143, 0x1e6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6e}}, 0x6, 0x19d, 0x1, 0x4, 0x6}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x4, 0xc}, 0x11a) [ 272.550463][T19605] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 272.611182][T19605] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 272.701685][T19596] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:38 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:38 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000005c000000], 0xf}}, 0x1c) 00:19:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) accept$unix(r0, 0x0, &(0x7f0000000080)) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:38 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) 00:19:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:38 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000060000000], 0xf}}, 0x1c) 00:19:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x300}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000000c0)='&\'\x00', 0x3) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000100)={&(0x7f0000001140)=""/4096, 0x1000}) 00:19:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0) 00:19:39 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000007f000000], 0xf}}, 0x1c) 00:19:39 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) kexec_load(0x9, 0x8, &(0x7f0000000340)=[{&(0x7f0000000000)="2b9e3b24c8e5b2e746b709beee906ba97182eb4ca33ced65fa90207b9b72079126f5d9bb9c3daa7b1a2be94e68b3bb4f9ca563974a0aaa4c8d5d449ac5347f2f8d83a4fbf06baa059371761190598072d0ff051d7ef78d3ed9c134f30107dc2d61b8ac13d6848f2e4847", 0x6a, 0x2, 0x7a}, {&(0x7f0000000140)="168db5740b6bc50d9b792853a069af7a09b033d024ef9f2cea07f094a8f310d5d0c7a562919ecccf3bea66793aa8d595aeb3efa5f8bb4b981ad8149534886a4a452668d7cb10a5b71ec0791dc3cb29f2bac5e01d643efbe9ecf7495bb4bef5eb70dbf8f6bf0b6f6f626c6a228e0e29985a7432257262f0cdeb59a9788cd6c5bd285eadf49c6a159cd21bab6e88a9d275370782c0eb361a86fb0d42577fd2f9fda1bde6d27e608438a4459a82a37255bc614ddd8e2481bbf2d7d4e5a76687ccb7090b8fcde6c107b77c58a96d7077adc5298dbd22011d83fa462c160ff5cce3df", 0xe0, 0x999, 0x3}, {&(0x7f0000001100)="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", 0x1000, 0x7, 0x7}, {&(0x7f0000000080)="bf896a379845286a1daa34ef1b57bb0c95af633445a2597632d4833214", 0x1d, 0xfffffffffffffffe, 0xffffffffffff5d78}, {&(0x7f0000000240)="e9f95dceddf9b7d8947c21bdb10e76a4b5168241e27055ad32be3f5d50a069fd9f442570d73359973aaf7411262093ae3a7ca79fd420e62aefc194523dfc328990f5f56d0cd83903455fb2707a2b20f577", 0x51, 0x1000, 0x3ff}, {&(0x7f0000002100)="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", 0x1000, 0x6, 0x7fff}, {&(0x7f00000000c0)="eeb44324bf41a820718a5c4c1cc88e33ce1a3be7cece6a6e", 0x18, 0x0, 0x9}, {&(0x7f00000002c0)="2a975f9c14853cd70205b7096061e228beac5324d9daa61feda512bb0a719ea78e4ef8189ad094b3a601012223aa643b86d74e295bead4324df02a4b2d48e1c66b6646fdefb418ec4db7264a1b1c7e3f24", 0x51, 0x0, 0x9}], 0x2a0002) bind(r0, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) 00:19:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x900, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x31f, 0x80000000, 0x2, 0x8b, 0xffffffff, @remote}, 0x10) 00:19:39 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x7e00000000000000, 0x0, 0x0, 0x0) 00:19:39 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x70000008dffffff], 0xf}}, 0x1c) 00:19:39 executing program 3: r0 = memfd_create(&(0x7f0000000080)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x80000001}) ftruncate(r0, 0xff) 00:19:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = creat(&(0x7f0000000080)='./file0\x00', 0x12) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r2) sched_getparam(r2, &(0x7f0000000240)) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}) ptrace(0x10, r2) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10010, r0, 0x10000000) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) sendmmsg$nfc_llcp(r3, &(0x7f0000000a80)=[{&(0x7f0000000280)={0x27, 0x0, 0x0, 0x5, 0x4, 0x1b2, "3dce0fa3635401113495c23b16d87d38164a0174a43aa7e9437228f96e8a4626cf2f8197df4775d0e5e9cd69f36a8b7f26a93ccab0bb18caa5f18af88c355c", 0x25}, 0x60, &(0x7f0000000900)=[{&(0x7f00000003c0)="93625c02ffa49621df5fccf0889d604f698dbce62423b0ce90949c98ec21ee1f58557525b4bf54eafe505e32a6ef418e2657abd661cfae777e5e698a6d615415983599ab6a7549659671d58dde5b4a62e34eaa5e5a7a207cad913fb4a6b32ce12e6b4bfca7608d307e7ec63973394ed2f4250f32de885921df393d80e08bf479d4ddded1a32aabce76e72c75a0b5402dddd783598cf8ca368a5fdd201cfc7b229959fa75ff8630a4a6bf85318488575e46f28514eb38fa05ae6c8a9cc35342af9ad6f86c7f4c8c4ad642c3e36f21be927b05c03067cf5e4ce3dc7e70cd0dad30d1b84de640e95ca646258f50ba7832fd2a", 0xf1}, {&(0x7f0000000300)="3a715337fe9b9d95b9e7b84f379dd8eed172f3c451f8071ca79f827e019fe2117394ab14baaa924f345f2e74222eb4fa788818c0b86f68cf862213da542a46b3ee695c42da6b8c205d7da7000ecd6bff03f7456807f30999273e9af1", 0x5c}, {&(0x7f00000004c0)="3c2ca03d96603b43fd5fef499f146b2c145e3cd2674e50faf29933f3d29ee41a836bab823a1d69eae8c765084d4ffbacab2ef90795107f80b9b8bafabe1559c7e5d8c6d28f8fc651df7e5e06e3acd20979a20069d5e355da48f72965c875614e723acb3facf44f78cb6d9d4b3c2004e7b1b23521c164118c9f7f65efd0d83f4c449bad818423046c6161c1b8786847adb929c1fac52adc2232634e8bb734f444bdd8fd0662e28d694594c4b836b5e3094baa67cb04fbe3c2cb6bb0b6cdb66852a94b0e410267b44c092edb3544b918775f4989dfad885ee43a39", 0xda}, {&(0x7f00000005c0)="6e91b9fa2148b89a5897b7dea06c0be1434795d1321413990d8a27a5eb026f32f99a02c705f8012706af7c8466b1302e549de7dae1c2c21cf52c2bcc9bbf3eb22dd05150370e0b63fcebe8e71388534b27140ace42bf", 0x56}, {&(0x7f0000000640)="7c9b90d809f42fa4fad10d7bdd7085f37909ed1a0cd093f4af05315a222c68006553303ac8c1e931563164f3c27c1767230981fb230a9434c15df6d3c8fcbd2abb89eb05bc6f40623036c5390b5600fba1916d2a74dfc3adb710ef6f477cf76b507a0d16a2ef9550eca13ab2f3f8852507fc3e2fdf7025112e6a444308a1ac2267bfedceec23fe293af7", 0x8a}, {&(0x7f0000000700)="6c7a71867f851eae6051a4afd5d2f6d85918442a97bb2bec6eb04a7948df2ea8d6c38907ceb248e6a8a30ebb77f9e47deeffbfe7e87257d26a36b226a4cf43864c1134ab20e18ca352a7cfd189d43af8bd52200dcc2323e92f31cd36af5a6e8dd67cc6887c602cc93461e1e1cbcad950cfc4d364ba6f092763a7766dc7f8389f0270eb179cf80e7f0a02fc10fad504c0457779fd13302cb5fe1177cfec31d298b88ca444", 0xa4}, {&(0x7f00000007c0)="8467d5555e6b8fa0c52acb676115a3b5eef6a9784e45c9a155021a2715a351", 0x1f}, {&(0x7f0000000800)="bf3b0edc65bf40a166", 0x9}, {&(0x7f0000000840)="4a282532f41c749ce9b541d60bbebd30f86b1c859c685965443a1cc9dcda0050f46894a8e68760a1a51082b496fc9a322d8a1a29440310ecaa2aa665d18bfe25ffeb0e7e3890f0f3717f785c7c1cb18cf97de465d7f7f73372a1", 0x5a}, {&(0x7f00000008c0)}], 0xa, &(0x7f00000009c0)={0x90, 0x1, 0x5, "4ff7eae0d18d282d7d360f081f19bc724e360f8b47f5f7768c914370090f227bd5e37bfb24076c16faff582ee84a4596f9e44d3a5fdbabc3b5d8fd20a3f29bdced1292ea275c8a435bdc1408a6ee0b3ffa0d4b390ffb13bc87fb7eb2039dffd700ce06e84b27f58179e15ce353ae5fa9cdf394b4aeb9d011fe"}, 0x90}], 0x1, 0x400c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)="7095077e98cb338344d69014d3c5273e9264f510e9dfd332ee35f1eb35d2f03dc8b49deef06d3cc12ad7b8bf7fa614542d9576ba8f75ab309cd1399d2b4ca4a28036c74cfaa5d228d210ee55b288dd6affe15847d2a268b2e58d3fa5bdb5ae376f0421acedea6c228ef2cefe7c06869cfc1b7f3cef9f467c38da6fc99c85e9060722a7e3c14f6ab208be51a27ef531f54873710badca7b6ad60c684d53c8f578c5cbb87b50a9b8463c18c3e4c2bdf42c9e49e8c7", 0xb4, r3}, 0x68) 00:19:39 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0xa, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond_slave_1\x00', 0xa00}) 00:19:39 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000c05d0000], 0xf}}, 0x1c) 00:19:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() capset(&(0x7f0000000080)={0x39980732, r1}, &(0x7f00000000c0)={0x796, 0xffffffffffffff01, 0x3, 0x9a1, 0xfffffffffffffff9}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000100)={&(0x7f0000004540)=""/4096, 0x1000}) 00:19:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0) 00:19:40 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000e8030000], 0xf}}, 0x1c) 00:19:40 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000f4010000], 0xf}}, 0x1c) 00:19:40 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:40 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETAF(r0, 0x5404, 0x0) ioctl$TCSETS(r0, 0x5403, 0x0) 00:19:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000000c0)={0x6, 0x2, 0x4}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:40 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000f5ffffff], 0xf}}, 0x1c) 00:19:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xffefffffff7f0000, 0x0, 0x0, 0x0) 00:19:40 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:40 executing program 3: r0 = creat(0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000480)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x80) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000140)={'dummy0\x00', 0x1}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x4]}, &(0x7f0000000100)=0x6) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) close(r3) [ 274.824058][T20393] QAT: Invalid ioctl 00:19:40 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000ffffff8d], 0xf}}, 0x1c) 00:19:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/174, 0xae}], 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 274.971945][T20399] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 275.112027][T20399] FAT-fs (loop5): Filesystem has been set read-only [ 275.141430][T20399] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:41 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x7000000fffffff5], 0xf}}, 0x1c) 00:19:41 executing program 3: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/8, 0x8, 0x0, &(0x7f0000000140)={{0x3, @default, 0x3}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000000)={0xfffffffffffffffd, 0x8}, 0xfffffffffffffc31) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1eb, 0x24000000) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x8f, "df8c7b3a2b05f629b5c34bb1c110fac94075621f1e71a1466b3eccec7ebb6513287e7ccc0ed096fa6bc30dcfcfec58fd34db61b62002daa628805b5f63f47ac0e073092eb0c4a5e1967d797cabb78b2c68166699c28d1e4c171f310ee69c4ebd66c757970fca6e6a25708a70427020663e652b77f67e54ecefa203078bb05f36e072fe2807246ad7dcff90f78b5888"}, &(0x7f00000002c0)=0x97) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000300)={r3}, &(0x7f0000000340)=0x8) 00:19:41 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:41 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0xcba6, 0x5, 0xfffffffffffffffb, 0x800, 0xe3, 0x6, 0x2}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) eventfd2(0x40, 0x0) 00:19:41 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x900000000000000], 0xf}}, 0x1c) 00:19:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0xffffffffff600000, 0x0, 0x0, 0x0) 00:19:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)={0x8000000000000}) ptrace(0x10, r2) accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r3 = dup(r1) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000080)) 00:19:41 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0xc00000000000000], 0xf}}, 0x1c) 00:19:41 executing program 3: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:41 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x4000000000000000], 0xf}}, 0x1c) 00:19:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) 00:19:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x1000}) 00:19:42 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0xff03000000000000], 0xf}}, 0x1c) [ 276.510535][T20781] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 276.553552][T20781] FAT-fs (loop3): Filesystem has been set read-only [ 276.584129][T20781] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 276.634334][T20684] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 00:19:42 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x0) 00:19:42 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0xffffffff00000000], 0xf}}, 0x1c) 00:19:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xd1de, 0x4000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x59, 0x8) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:42 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:42 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x0) rename(&(0x7f0000001800)='./file0/file0\x00', &(0x7f0000000000)='./file2\x00') ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xfa) 00:19:42 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write$apparmor_current(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="6368616e67656861742030789d0d804f3030303030303030303030b61421152ef4ecdc00054950437632002f6465762f6365632300544950437632005449506e763200544950437632b2116465762f6365632300"], 0x54) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022bbd7000fedbdf25120000002400020008000200ffff0000080002000600000008000200030000000800020007000000200007000c000300000000000800000000000000ff07000008000200d20000003982d8b98cab4bd21fd33cc134a93567"], 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x8800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x47, [], 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f0000000340)=""/71}, &(0x7f0000000440)=0x78) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x3e, &(0x7f0000000000)={0x7, 0x0, 0x1ffffffffffe}) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:42 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x2], 0xf}}, 0x1c) 00:19:42 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x9, 0x2, 0x0, "41cae43e6fd3654f87b648176859490868c1f11ec074f8f3b59bad0e2ef4d5ac", 0x8000000000000}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2a00, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10000, 0x8}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000100)={r2, 0x3}) 00:19:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) 00:19:43 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x3], 0xf}}, 0x1c) 00:19:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000002c0)={"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"}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) connect$inet6(r1, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000006c0)={0x6, 0x0, [{0x249, 0x0, 0x7}, {0xbff, 0x0, 0x3}, {0xb1f, 0x0, 0x8}, {0xb8f, 0x0, 0x1}, {0xaff, 0x0, 0x6da}, {0xbff, 0x0, 0x2}]}) process_vm_readv(r3, &(0x7f0000000240)=[{&(0x7f0000000280)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000001c0)=""/63, 0x3f}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) [ 277.360698][T20945] ptrace attach of "/root/syz-executor.3"[18621] was attempted by "/root/syz-executor.3"[20945] 00:19:43 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x50000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x4, @empty, 0x1}}, [0x2, 0x7, 0x2d, 0x1f, 0x6, 0x733, 0x9, 0x8, 0xb7, 0xffff, 0x7f, 0x2cd576ea, 0x6, 0x8, 0xbb1]}, &(0x7f00000002c0)=0x100) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x5, 0x0, 0x0) 00:19:43 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x4], 0xf}}, 0x1c) 00:19:43 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x3, 0x0, @ipv4={[], [], @broadcast}}}, 0x24) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="6d000000c072fae1e3d90473c1c9fd5dfd8f38b90000000000000000f1db9d9002"], &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000440)=0x8) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18440040}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x64, r4, 0x102, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @local}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xf6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x4081) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f00000003c0)) bind$x25(r2, &(0x7f00000002c0)={0x9, @remote={[], 0x2}}, 0x12) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabbf7c4fa200575cdab4500e430000000449004ac0000"], 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) 00:19:43 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:43 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x7], 0xf}}, 0x1c) 00:19:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000100)='net/bnep\x00') clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x434}, &(0x7f0000000180)=0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xff, 0x0, 0x6, 0x2, r5}, 0x10) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000000)) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x6, 0x0, 0x0) 00:19:44 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x8], 0xf}}, 0x1c) 00:19:44 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x3, 0x0, @ipv4={[], [], @broadcast}}}, 0x24) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="6d000000c072fae1e3d90473c1c9fd5dfd8f38b90000000000000000f1db9d9002"], &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000440)=0x8) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18440040}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x64, r4, 0x102, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @local}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xf6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x4081) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f00000003c0)) bind$x25(r2, &(0x7f00000002c0)={0x9, @remote={[], 0x2}}, 0x12) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabbf7c4fa200575cdab4500e430000000449004ac0000"], 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) 00:19:44 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:44 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x9], 0xf}}, 0x1c) 00:19:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x20000) setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f00000000c0)="e8e178f3fbea565506b963eaafd4ca426a95b599f9b88cf36387a8527ab19c77885983d5dc3d541c831230780f7c9cd826331dddaf09a62659fa19e3c4d51f56d6eb76e58a4dbe2cc8aa093203d32d293002633c4a6a9ca346b6bb6f0daeb6add226da9744d822cb0879f171e3d5061326cc3272e1e6c3e9169982d5d4be1557cb5ce0d2b811304b148a4214a7e10a85513387664e38835b8dd48f0bc536a2ecdf7d9cb067b661a658b7546ce71b503b0be5a54a59a5812bddf18779f965d3cb47cbb2794794e8788fe083dd2b3eff5e7a3705ab9c821a014ef8f5de", 0xdc) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7, 0x0, 0x0) 00:19:44 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xa], 0xf}}, 0x1c) 00:19:44 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x3, 0x0, @ipv4={[], [], @broadcast}}}, 0x24) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="6d000000c072fae1e3d90473c1c9fd5dfd8f38b90000000000000000f1db9d9002"], &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000440)=0x8) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18440040}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x64, r4, 0x102, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @local}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xf6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x4081) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f00000003c0)) bind$x25(r2, &(0x7f00000002c0)={0x9, @remote={[], 0x2}}, 0x12) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabbf7c4fa200575cdab4500e430000000449004ac0000"], 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) [ 278.678255][T20972] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 278.688604][T20972] FAT-fs (loop5): Filesystem has been set read-only 00:19:44 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x7f, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x28, &(0x7f00000001c0)={&(0x7f0000000100)="0f38c8c665f247acc403f9df18df40db40068fc9289001f3a78f6978e17f013e2e0ff2cdc463594cc53fc46260f7c0", {0x1b48166d}, 0xc0000007, &(0x7f0000000140)="0fc7220f188809000000360fedfbc4827d35a39c7affff41d302c4a1a5f58d585b0000c4417e2ca6ce370000f2400f5d976717a17c2edc444400c483455c731e00"}, &(0x7f00000002c0)={&(0x7f0000000200)="368b6909660f38075f30660fe3ebc4a2c19afc0f38cb6c9718c44149e80494420f7eb600000000460f8e0d000000c481fc50c0c4827d18d5", {}, 0x0, &(0x7f0000000240)="660f3a407700e840ddcfc421795a2ec4e1e05d01c4837917060866460f383dcc6666470f3825ca36f04081943e4a00000007000000410fdca900000021c4a29af5934f000000"}, 0x8, &(0x7f0000000300)) clone(0x40003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RREMOVE(r1, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:44 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:44 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xe], 0xf}}, 0x1c) 00:19:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7e, 0x0, 0x0) 00:19:44 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x13], 0xf}}, 0x1c) 00:19:45 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x3, 0x0, @ipv4={[], [], @broadcast}}}, 0x24) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="6d000000c072fae1e3d90473c1c9fd5dfd8f38b90000000000000000f1db9d9002"], &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240), &(0x7f0000000440)=0x8) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18440040}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x64, r4, 0x102, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @local}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xf6}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x4081) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f00000003c0)) bind$x25(r2, &(0x7f00000002c0)={0x9, @remote={[], 0x2}}, 0x12) write$cgroup_pid(r3, &(0x7f0000000640), 0x12) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabbf7c4fa200575cdab4500e430000000449004ac0000"], 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) 00:19:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:45 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:45 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x58], 0xf}}, 0x1c) 00:19:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x300, 0x0, 0x0) 00:19:45 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x5, 0x1, 0x1, 0x5, 'syz1\x00', 0x4}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000100), 0x10) setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000280)=0x100009, 0x1) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x4, 0x7, 0x0, 0x8, 'syz1\x00'}, 0x5, 0x30000020, 0x3, r2, 0x2, 0x9, 'syz0\x00', &(0x7f00000000c0)=['syz1\x00', 'syz1\x00'], 0xa, [], [0x0, 0xaa2d, 0x100000000, 0x9]}) 00:19:45 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000000c0)={0x2}) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x4207, r2) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:45 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x5c], 0xf}}, 0x1c) 00:19:45 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x500, 0x0, 0x0) 00:19:45 executing program 3: r0 = socket(0x3, 0x6, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) write(r0, &(0x7f00000004c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 00:19:45 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x60], 0xf}}, 0x1c) 00:19:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:45 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000001, 0x100) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7ff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)=0x80000001) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000100)=@nl=@kern={0x10, 0x0, 0x0, 0x20000}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="f770218d995bd161bd474b4b6f2bbe10ae", 0x11}, {&(0x7f00000001c0)="1bc06ce3fee50c75ef6051f730bc6e2c4408ae03e4fd46f51ba091f62abc683f2599741a43e9cb2e01e268842d8d5e6bf471d4a362265811aeb33027b606bb649403edfb6b20e8b993c8875019a0ecd3f5a1d510fb5ce3d7af2feae2dfc6d4f73bfe3934eb66caef0912fa9adf7e33695f809e2b86ae39", 0x77}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000340)="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", 0xfe}], 0x4, &(0x7f0000000480)=[{0x30, 0x101, 0x3, "7414f3b9f40b827123134a767b6d8e073801aba503fb159a0277ebeb50"}, {0x80, 0x10e, 0x9, "640f737360b0e727d1d8ff6775096404d743f49b80ef3c89ff5a118ccd4dd07fa6f8fc719c9fb74df1cc2de44cbff839d47c033df28c5b24bbc840bce8532537cc0a1e2388179bd0db8aa9962c85d44a784fffd67183c117e38f9120b64feb3f2bc50befb686835b6fbf6d2e156076"}, {0xd8, 0x11a, 0x8000, "4697d2ceb4e423fa0e569d772ea4f9acd9133db95f0fd3a517955383ec4bcd1020386659fb509bf20c0c06c075774eef9630f8f5319e22de78d6930f62545479279e62f32ff2c40a35ac8e9b47e5e28e3e74416a79920dd4c36cd80ae1d97b437e776ec6c499d196050d3ff978c6fa9fa93921eee41f05798531e3e29f7f8e0d6d81c7168d2bb6f2ac1f788d3be9d9ddd84ed403551bcc1f7e00a1eaace0f5c66b37389f5e4d5a31e384d616144720ca9d6f4c14165bd77d7b35895b609b66253518"}, {0x78, 0x19f, 0x2, "1b0b5397d86adad878735e2803ca477a38783fd8b314c14d31c3a46dd5de3b5a04bd69f84b25664dc9da1a3fd6297471168d1dfa372bb683a5a011b854197c376e75172294954023c28362c0a866bd5b21327cf71efd5b4cf0fa387d5901e9cc212fb27a372546"}], 0x200}, 0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x304, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}}, 0x10) semget$private(0x0, 0x3, 0x200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x80000, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000840)='/dev/snd/seq\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x402, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1}}, ["", "", "", ""]}, 0x24}}, 0x1) bind$bt_l2cap(r0, &(0x7f00000009c0)={0x1f, 0x10001, {0x9, 0x480000000000, 0x4e, 0x6, 0xe8b}, 0x3, 0x22}, 0xe) listxattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/4096, 0x1000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001a40)={0x1000, 0xffffffffffffffff, 0x0, {0xc, @pix_mp={0x5, 0x4, 0x77775f7f, 0x3, 0xe, [{0x8, 0xffffffffffff65e9}, {0x100000000, 0x1}, {0x1, 0x7ff}, {0x8, 0xff}, {0xee86, 0x3}, {0x80000000, 0x6}, {0x1, 0x10001}, {0x200, 0x2}], 0x3, 0x1ff, 0x0, 0x1, 0x3}}}) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000001b40)=0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @loopback}, 0x24, 0x0, 0x0, 0x0, 0xfffffffffffffbff, &(0x7f0000001b80)='veth0\x00', 0xfffffffffffffff8, 0x5, 0x2}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000001c40)={0x1000, 0x5ed7, 0x0, 0x3ff, 0x13, 0x1, 0x1, 0x3184, 0x2, 0x8}) openat$dir(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', 0x200100, 0x91) sendto$ax25(r0, &(0x7f0000001cc0)="7d0e43613cebe38dcaea49d17c0523a6764ea35af7e6f7a3b63d845d2e9465ecd9404f5568d30935a25920ac288f7115fe0807d3d01444b962de3d9abcab9118f2ea3b54d1573be8052945d84399ebfebe1e80ecdbf2a6b9fa974ab8eb92c9d4538948289cea444d7e7493a9b90eb33a31e5d9dc11079a557a3f628fcdb41d483c8ae15b5453f60ea88b27950e772855cfa632c155170892bce3d88d27aeb0d748c10dddc14fe14160a3d31fcc873381db529ae9f0c12361253e4a0bcbf52b4c6d8d9bac770ef86eb807771adf8530c262dad55865de7db4b1db853e1d", 0xdd, 0x20040000, &(0x7f0000001dc0)={{0x3, @bcast, 0x5}, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x48) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001e40)=""/68) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001ec0), &(0x7f0000001f40)=0x68) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) ioctl$VIDIOC_S_FBUF(r5, 0x4030560b, &(0x7f0000002080)={0x8, 0x2, &(0x7f0000002000)="5b4e594e19b72820b3ec2c20a91cb8a6b852e3a6fabb416ed31fe3ebb7bcbe83b665a9ed771eb555be7ec14dc30cdbcec01f7b2018297074c230e7c07c3e7722eb", {0x9, 0x0, 0x4c47504a, 0x4, 0x8, 0x8, 0x0, 0x7fff}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) accept4$x25(r0, &(0x7f00000020c0), &(0x7f0000002100)=0x12, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000021c0)={0xf000000, 0x1, 0x10000, [], &(0x7f0000002180)={0x9b0905, 0x3000000000000000, [], @p_u8=&(0x7f0000002140)=0x80000000}}) syz_open_dev$adsp(&(0x7f0000002200)='/dev/adsp#\x00', 0x1, 0x80200) 00:19:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x600, 0x0, 0x0) 00:19:46 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x1f4], 0xf}}, 0x1c) 00:19:46 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:46 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:46 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x300], 0xf}}, 0x1c) 00:19:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000780)) getgroups(0x7, &(0x7f0000000640)=[0xee00, 0xee00, 0x0, 0xee00, 0xee00, 0xee01, 0xee00]) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="a92ef2421328c95ff3", 0x9}, {&(0x7f0000000240)="9ab4a3058d621564fc98927c007ade976729ae87f094f909f69a42d71e41b79fce8e68015f", 0x25}], 0x2, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r2, r6, r8}}}], 0x70, 0x4000}, 0x4000011) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000080)={&(0x7f0000004540)=""/4096, 0x1000}) 00:19:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:46 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x700, 0x0, 0x0) [ 280.736313][T21526] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 280.744187][T21526] FAT-fs (loop5): Filesystem has been set read-only [ 280.896732][T21706] kvm: emulating exchange as write 00:19:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x2000, 0x0, 0x0) 00:19:46 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x3e8], 0xf}}, 0x1c) 00:19:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x200100) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x1, 0x4) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:47 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x700], 0xf}}, 0x1c) 00:19:47 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0xa, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x111000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7) 00:19:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x4000, 0x0, 0x0) [ 281.600229][T21662] debugfs: Directory '21662-4' with parent 'kvm' already present! 00:19:47 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x0, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40002, 0xc6) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000000c0)) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000280)=0xeb) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) ptrace(0x18, r1) 00:19:47 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x900], 0xf}}, 0x1c) 00:19:47 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x60ff, 0x0, 0x0) 00:19:47 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xa00], 0xf}}, 0x1c) 00:19:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='-md5sumem0\x00', 0xb, 0x3) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7600, 0x0, 0x0) 00:19:48 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xe00], 0xf}}, 0x1c) 00:19:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:48 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x1300], 0xf}}, 0x1c) 00:19:48 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x0, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7e00, 0x0, 0x0) 00:19:48 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x2000], 0xf}}, 0x1c) 00:19:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/ip_vs\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r4 = getgid() mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030d8ba1e2e3037303030302c757365725f69643d", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',allow_other,default_permissions,max_read=0x0000000000000182,allow_other,allow_other,max_read=0x0000000000000008,mask=^MAY_APPEND,audit,measure,\x00']) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:48 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:48 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x3f00], 0xf}}, 0x1c) 00:19:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x9600, 0x0, 0x0) 00:19:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:49 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x4000], 0xf}}, 0x1c) [ 283.298678][T22384] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 283.339359][T22384] FAT-fs (loop5): Filesystem has been set read-only 00:19:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x200000, 0x0, 0x0) [ 283.383001][T22384] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:49 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x0, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:49 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x5800], 0xf}}, 0x1c) 00:19:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)={0x0, 0x0, 0x40000000000000}) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:49 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:49 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x5c00], 0xf}}, 0x1c) 00:19:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x400000, 0x0, 0x0) 00:19:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x20800, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000240)) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) clone(0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x180, r3, 0x120, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41a29cb2}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64d3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2bf6fb55}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x296000, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000180)=""/123) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:49 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x5dc0], 0xf}}, 0x1c) [ 284.142965][T22747] Unknown ioctl -2146937321 00:19:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x50f000, 0x0, 0x0) 00:19:50 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x6000], 0xf}}, 0x1c) 00:19:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000080)='syz0\x00') ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:50 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:50 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x7f00], 0xf}}, 0x1c) 00:19:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x707100, 0x0, 0x0) 00:19:50 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:50 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xc05d], 0xf}}, 0x1c) 00:19:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$setsig(r0, 0xa, 0x27) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:50 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xe803], 0xf}}, 0x1c) [ 285.005214][T22993] Unknown ioctl 8831 00:19:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x70e000, 0x0, 0x0) 00:19:51 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xf401], 0xf}}, 0x1c) [ 285.028885][T22976] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 285.114473][T22976] FAT-fs (loop5): Filesystem has been set read-only 00:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = semget$private(0x0, 0x4, 0x110) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000180)=""/145) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xffffffffffff8000}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r4, 0x8000}, 0x8) [ 285.172293][T22976] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 285.224828][T22976] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 285.287880][T22976] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:51 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x1000000], 0xf}}, 0x1c) [ 285.340914][T22974] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:51 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x717000, 0x0, 0x0) 00:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0xa3, 0x800, 0x1, 0x6, 0xf3ff, r1}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:51 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:51 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x2000000], 0xf}}, 0x1c) [ 285.751954][T23227] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 285.791618][T23227] FAT-fs (loop5): Filesystem has been set read-only [ 285.853365][T23227] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 285.875495][T23227] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 285.894603][T23227] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x760000, 0x0, 0x0) 00:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x10000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x4000) accept4$alg(r2, 0x0, 0x0, 0x80000) 00:19:51 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x3000000], 0xf}}, 0x1c) [ 285.907963][T23226] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:52 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x4000000], 0xf}}, 0x1c) 00:19:52 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x40, 0x501001) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000200)={0x0, 0x0, {0xd, 0xa16, 0x0, 0x6}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0xf, r3) ptrace$getsig(0x4202, r3, 0xffff, &(0x7f0000000140)) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) 00:19:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x80ffff, 0x0, 0x0) 00:19:52 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x7000000], 0xf}}, 0x1c) 00:19:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) clone(0x800000041fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x0, 0x2) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000003c0)) ptrace(0x10, r0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x800, 0x80600) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x50cf1fee}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r3, 0x2}, &(0x7f0000000300)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000180)={0x3, 0x3, 0x80, 'queue1\x00', 0x8}) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000100)='{md5sum*vmnet1:-]\x00', 0x12, 0x3) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:52 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x8000000], 0xf}}, 0x1c) 00:19:52 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x960000, 0x0, 0x0) 00:19:52 executing program 1: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x10, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) getpid() 00:19:52 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x9000000], 0xf}}, 0x1c) 00:19:53 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xa000000], 0xf}}, 0x1c) 00:19:53 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xe07000, 0x0, 0x0) 00:19:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x131000) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x3}, 0x8) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:53 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xe000000], 0xf}}, 0x1c) 00:19:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000200)={&(0x7f0000000100)="50550205a3c7190b4f51c36e9112be7e58085a95c6eefcedb6a0d094af244113eda72946a8d76875c6da2f1268881db7f1e63982630c479b7a0be6e8849beeff818d8cf1ac02a8029f375363fc142d519bdaff7fd1c8df98d87f3c5e9ba456a2ef8611443d5ab89b8c5deec7e9fdb97d2983e45a71e5d13e70a9685e978c1549d90d46d0a3f4b8da3a7d808ccefbf3664217baea89cefbc19f767b55f3d9629a93795d317770140392472c408d349154da41b3f9c32ab30d888ff4912d83e1c3e6adb4c072ca968ff4afc5e06c45be910635e04a0469e9", 0xd7}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) r2 = fsopen(&(0x7f00000000c0)='cpuset\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xf05000, 0x0, 0x0) 00:19:53 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:53 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x13000000], 0xf}}, 0x1c) 00:19:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'eql\x00', 0x400}) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x4, 0x10040) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r0, r2}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000000)) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x1000000, 0x0, 0x0) 00:19:54 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:54 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x20000000], 0xf}}, 0x1c) 00:19:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = gettid() write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x27, 0x37, 0x2, {0x0, 0x0, 0x7, r1, 0x9, 'mime_type'}}, 0x27) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() r4 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xc10f, 0x20000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)={0x7fffffffffffffff, 0x0, 0x1000000000000}) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x2000000, 0x0, 0x0) 00:19:54 executing program 1: socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:54 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x3f000000], 0xf}}, 0x1c) 00:19:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x3000000, 0x0, 0x0) 00:19:55 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x40000000], 0xf}}, 0x1c) 00:19:55 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:55 executing program 1: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x94) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000380), &(0x7f00000003c0)=0xc) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, &(0x7f00000000c0)="7cbb93c25ef812357cd4199b0e1ae9e4bfba7019eef19c18639b2862c3b0259d073fb8c3d15f29d044434af95074682d559ed3b6c4eb78729b05114ce172ad0e382a04c0990e638c00136b30138da499b7079b76a77b1a4f6bcab5c7b2bdf22df69c96b7cf74ae22ad86cb685ddf46ef039f243f95c8673cf300ae1f8c3e63799754db013b341792c921c2041a2df3a14f92a53d7cd97339a5a91ef6ac8ee3683a4d814a223231b3bfa1612c11071bab0acfb8e8b1d4c77b6dd87bac557d9ff0eac73f8843bbdda3da3d5c19", &(0x7f00000001c0)=""/243}, 0x18) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000300)={'bond_slave_0\x00', {0x2, 0x4e24, @rand_addr=0xfe}}) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:55 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:55 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x58000000], 0xf}}, 0x1c) 00:19:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100000001, 0x22400) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001140)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x30f3}, 0x8) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000000)) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:55 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x5c000000], 0xf}}, 0x1c) 00:19:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x4000000, 0x0, 0x0) 00:19:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 289.527010][T24219] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 289.572171][T24219] FAT-fs (loop5): Filesystem has been set read-only [ 289.612112][T24219] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:55 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x60000000], 0xf}}, 0x1c) [ 289.672433][T24219] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 289.711082][T24219] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 289.755577][T24218] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x5000000, 0x0, 0x0) 00:19:55 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:56 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:56 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x7f000000], 0xf}}, 0x1c) 00:19:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/57, &(0x7f00000000c0)=0x39) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x96, 0x7, 0x6, "5f924351c602715c816c0005ccdbb5e8", "88441530236d13c8f0294f90770f2dfe6ca3f8050fb70fbea4ad1f059c9d3c7bbb9bc5815247f77595b4a0e0a8599c6b103570457880aca1b11f71b7825a258b6d69c1db34077b49b6a6f25e82e6b977da59240308350a8f00a7fc32f6579845590602fde2f004d7f09df070b3b190a999446cb87a43fc83ae9ead09a5974c79e9"}, 0x96, 0x3) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x6000000, 0x0, 0x0) 00:19:56 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x8dffffff], 0xf}}, 0x1c) 00:19:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x43b) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:56 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xc05d0000], 0xf}}, 0x1c) 00:19:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7000000, 0x0, 0x0) 00:19:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10400, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:56 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:56 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xe8030000], 0xf}}, 0x1c) 00:19:57 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4840, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x20000000, 0x0, 0x0) 00:19:57 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xf4010000], 0xf}}, 0x1c) [ 291.081017][T24655] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 291.093419][T24655] FAT-fs (loop5): Filesystem has been set read-only [ 291.134802][T24655] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 291.202725][T24655] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:57 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xf5ffffff], 0xf}}, 0x1c) [ 291.306346][T24655] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 291.337317][T24622] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x40000000, 0x0, 0x0) 00:19:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x202000) bind$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x21c800, 0x200000) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000000c0)={0x1}) 00:19:57 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xffffff8d], 0xf}}, 0x1c) 00:19:57 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7e000000, 0x0, 0x0) 00:19:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) r2 = dup3(r0, r0, 0x80000) setsockopt$inet6_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000080)="dc5e2a1cf983642b174639b5dec55dc67f6c6336397281eb13e80b830e376018f5e14cb7d54c728f346ad9258b3018eb798ec5", 0x33) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) [ 291.940861][T24859] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 291.957223][T24859] FAT-fs (loop5): Filesystem has been set read-only [ 291.980244][T24859] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:58 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xfffffff5], 0xf}}, 0x1c) 00:19:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xff600000, 0x0, 0x0) [ 291.999618][T24852] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:19:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = getuid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r7 = getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f00000002c0)={{0x4, r3, r4, r5, r6, 0x140, 0x1000}, 0xfffffffffffff690, 0xe09, 0x2, 0x3, r7, r8, 0x23588cf7}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = getpid() rt_tgsigqueueinfo(r9, r9, 0x16, &(0x7f0000000000)) ptrace(0x10, r9) ptrace$getregset(0x4205, r9, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) 00:19:58 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0x1f, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x100000000000000], 0xf}}, 0x1c) 00:19:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xffff8000, 0x0, 0x0) 00:19:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x200000000000000], 0xf}}, 0x1c) 00:19:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) munlockall() r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffffffff7fff, 0x4425c1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x1d, "3bb82da3a7fbe50917b2d4611b761100e3e8bfcb9d9ca88bff3078f4fc"}, &(0x7f0000000180)=0x25) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r3, 0x3, 0x30, 0x2, 0x4}, &(0x7f0000000200)=0x18) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001100)={&(0x7f0000004540)=""/4096, 0x4f8}) sched_setparam(r1, &(0x7f0000000080)=0x6) chdir(&(0x7f00000000c0)='./file0\x00') 00:19:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x300000000000000], 0xf}}, 0x1c) 00:19:58 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:58 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x2000000000, 0x0, 0x0) 00:19:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x400000000000000], 0xf}}, 0x1c) 00:19:59 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0x1f, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:59 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x700000000000000], 0xf}}, 0x1c) 00:19:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x400000000000, 0x0, 0x0) 00:19:59 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x800000000000000], 0xf}}, 0x1c) 00:19:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x55555714d000, 0x0, 0x0) 00:19:59 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:59 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x900000000000000], 0xf}}, 0x1c) 00:19:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:59 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:19:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x55555716f000, 0x0, 0x0) 00:20:00 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0x1f, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xa00000000000000], 0xf}}, 0x1c) 00:20:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:00 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x60ffffffffff, 0x0, 0x0) 00:20:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xe00000000000000], 0xf}}, 0x1c) 00:20:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x1300000000000000], 0xf}}, 0x1c) 00:20:00 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:00 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0xc8d8, 0x0, 0x5, 0x12f, 0x23239184, 0x4}) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd8021050}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000000)=""/176) migrate_pages(0x0, 0xc3, &(0x7f0000000140)=0x8, &(0x7f0000000380)=0x3) 00:20:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x760000000000, 0x0, 0x0) 00:20:00 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x2000000000000000], 0xf}}, 0x1c) 00:20:01 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(0x0, 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:01 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x3f00000000000000], 0xf}}, 0x1c) 00:20:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7fdc88e18000, 0x0, 0x0) 00:20:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:01 executing program 1: mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1f, 0x204000) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) chroot(&(0x7f00000000c0)='./file0\x00') ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) 00:20:01 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x4000000000000000], 0xf}}, 0x1c) 00:20:01 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x5800000000000000], 0xf}}, 0x1c) 00:20:01 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7fffffffefff, 0x0, 0x0) 00:20:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:01 executing program 1: r0 = socket(0x4, 0x0, 0x8) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xfffffd65) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) 00:20:01 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x5c00000000000000], 0xf}}, 0x1c) 00:20:02 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(0x0, 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:02 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x6000000000000000], 0xf}}, 0x1c) 00:20:02 executing program 1: r0 = socket$inet6(0xa, 0x10000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r1}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="75000000b983a4d432eee882f33614e6bb7c02de7db90d0f73f08aa0097a21c3b957a3c7b5db90e6ae847e13647eb762090a87a25e1bc017fe5e0cefe20c191e9d48988efa9d84984590b384f8c698888e29df8c7827caff65aa92ba7396587f986013f2b56639dacd3e65264e6b1ab800000000d38a65f430a70e72e5ea5e0a57588031d04191ecb3ac9a0580d4c4bab5962e121ba2e576891792e2701372bd8742d4081a82550b188669f691829a0210d3e160df09a993f1f4b4e277470d8bb6f24d76705458a070c9fc05aaf04c02a38f8d20f22a269b05966a2b21c4bb9711e4"], &(0x7f0000000000)=0x7d) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x20}, &(0x7f0000000140)=0x8) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x88000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'bond_slave_0\x00', 0x400}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40400, 0xa0) accept$ax25(r4, 0x0, &(0x7f0000000380)) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000001c0)=""/137) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") unshare(0x400) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4e, &(0x7f0000000300)={@local={0xfe, 0x80, [0xa4ffffff]}}, &(0x7f00000004c0)=0x20) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000280), 0x4) 00:20:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x960000000000, 0x0, 0x0) [ 296.277526][T25910] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 296.336697][T25910] FAT-fs (loop0): Filesystem has been set read-only 00:20:02 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x7f00000000000000], 0xf}}, 0x1c) [ 296.380633][T25910] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 296.430105][T25910] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:02 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8000, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 296.482478][T25910] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 296.547950][T25909] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:02 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:02 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x8dffffff00000000], 0xf}}, 0x1c) 00:20:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x20000000000000, 0x0, 0x0) 00:20:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:20:02 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016", 0xfffffffffffffe3b, 0x1400}], 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x1, {0x9, 0x6, 0x4}}) 00:20:03 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(0x0, 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xc05d000000000000], 0xf}}, 0x1c) 00:20:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x70710000000000, 0x0, 0x0) 00:20:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:20:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10c) fallocate(r1, 0x0, 0x40000, 0xfff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0x0, r2) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:20:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xe803000000000000], 0xf}}, 0x1c) 00:20:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 297.727878][T26167] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 297.743314][T26167] FAT-fs (loop0): Filesystem has been set read-only 00:20:03 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x80e188dc7f0000, 0x0, 0x0) 00:20:03 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xf401000000000000], 0xf}}, 0x1c) 00:20:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:20:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x86, &(0x7f0000ffc000/0x3000)=nil, 0x3}) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="130000003200ffffff7f00000000aee4058c00", 0x13}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0), 0x20) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000001c0)={0x2e637471, 0x6, 0xffff, {}, 0x9}) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x1, 0x7}) [ 298.042360][T26412] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 298.061424][T26412] FAT-fs (loop0): Filesystem has been set read-only [ 298.071785][T26412] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 298.095566][T26411] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:04 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:04 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xf5ffffff00000000], 0xf}}, 0x1c) 00:20:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:20:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0) 00:20:04 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:04 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:20:04 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0xffffffff00000000], 0xf}}, 0x1c) 00:20:04 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:20:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xd0145755550000, 0x0, 0x0) 00:20:04 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:04 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x2], 0xf}}, 0x1c) 00:20:05 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:05 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x3], 0xf}}, 0x1c) 00:20:05 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:20:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xe0700000000000, 0x0, 0x0) 00:20:05 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:05 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:05 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:20:05 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x4], 0xf}}, 0x1c) 00:20:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xf0165755550000, 0x0, 0x0) 00:20:05 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x7], 0xf}}, 0x1c) 00:20:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x5, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x2080, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x20000017}) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "1301cc8e1ab0faf2", "1ed4107077830c80fc082f3f64b0c020", "d2350ef4", "3869c0b93d24ceab"}, 0x28) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000005c0)=""/248) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) 00:20:06 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:06 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x8], 0xf}}, 0x1c) 00:20:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xf0500000000000, 0x0, 0x0) 00:20:06 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:06 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000008c0)=""/201) 00:20:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:06 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x9], 0xf}}, 0x1c) 00:20:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x100000000000000, 0x0, 0x0) 00:20:06 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xa], 0xf}}, 0x1c) 00:20:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 300.545451][T27039] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 300.600816][T27039] FAT-fs (loop5): Filesystem has been set read-only [ 300.620571][T27039] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:06 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000008c0)=""/201) [ 300.703453][T27039] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 300.742603][T27039] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 300.785055][T27036] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:06 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x200000000000000, 0x0, 0x0) 00:20:06 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xe], 0xf}}, 0x1c) 00:20:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 301.193730][T27188] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 301.216803][T27188] FAT-fs (loop5): Filesystem has been set read-only [ 301.231921][T27188] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 301.253372][T27185] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:07 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:07 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:20:07 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x13], 0xf}}, 0x1c) 00:20:07 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000008c0)=""/201) 00:20:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x300000000000000, 0x0, 0x0) 00:20:07 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:07 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x58], 0xf}}, 0x1c) 00:20:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x400000000000000, 0x0, 0x0) 00:20:07 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:07 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000008c0)=""/201) 00:20:07 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x5c], 0xf}}, 0x1c) [ 301.780568][T27216] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 301.839526][T27216] FAT-fs (loop0): Filesystem has been set read-only [ 301.865030][T27216] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 301.945181][T27216] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 301.983927][T27216] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 302.001710][T27215] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:08 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:08 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x60], 0xf}}, 0x1c) 00:20:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x500000000000000, 0x0, 0x0) [ 302.165646][T27242] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 302.196777][T27242] FAT-fs (loop5): Filesystem has been set read-only [ 302.227928][T27242] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 302.267655][T27242] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:08 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:08 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x1f4], 0xf}}, 0x1c) [ 302.304226][T27242] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 302.369856][T27238] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:08 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, 0x0, 0x0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:08 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x600000000000000, 0x0, 0x0) [ 302.506972][T27363] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 00:20:08 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x300], 0xf}}, 0x1c) [ 302.563612][T27363] FAT-fs (loop0): Filesystem has been set read-only [ 302.600959][T27363] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 302.670595][T27363] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 302.711104][T27363] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 302.781530][T27359] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:09 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x3e8], 0xf}}, 0x1c) 00:20:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x700000000000000, 0x0, 0x0) 00:20:09 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:09 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:09 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x700], 0xf}}, 0x1c) 00:20:09 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:09 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, 0x0, 0x0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0) 00:20:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x7e00000000000000, 0x0, 0x0) 00:20:09 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x900], 0xf}}, 0x1c) 00:20:09 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:09 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:10 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xa00], 0xf}}, 0x1c) 00:20:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0) 00:20:10 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:10 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xe00], 0xf}}, 0x1c) 00:20:10 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, 0x0, 0x0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:10 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x5, {0x1, 0x9, 0x70b, 0x2}}) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:10 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x1300], 0xf}}, 0x1c) 00:20:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xffefffffff7f0000, 0x0, 0x0) 00:20:10 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:10 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/video2\x00', 0x2, 0x0) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:10 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x2000], 0xf}}, 0x1c) 00:20:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0) 00:20:11 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x3f00], 0xf}}, 0x1c) 00:20:11 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:11 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300), 0x0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:11 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:11 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x4000], 0xf}}, 0x1c) 00:20:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0xffffffffff600000, 0x0, 0x0) 00:20:11 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:11 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:11 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x5800], 0xf}}, 0x1c) 00:20:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2) 00:20:12 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x5c00], 0xf}}, 0x1c) 00:20:12 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:12 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300), 0x0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:12 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:12 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x5dc0], 0xf}}, 0x1c) 00:20:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3) 00:20:12 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:12 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x6000], 0xf}}, 0x1c) 00:20:12 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x4) 00:20:13 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x7f00], 0xf}}, 0x1c) 00:20:13 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:13 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300), 0x0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:13 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xc05d], 0xf}}, 0x1c) [ 307.273376][T27715] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 307.324021][T27715] FAT-fs (loop0): Filesystem has been set read-only 00:20:13 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xe803], 0xf}}, 0x1c) 00:20:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x5) [ 307.366153][T27715] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 307.472124][T27711] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:13 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:13 executing program 1: mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:13 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xf401], 0xf}}, 0x1c) 00:20:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6) 00:20:13 executing program 1: mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:13 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x1000000], 0xf}}, 0x1c) 00:20:14 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7c", 0x70, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7) 00:20:14 executing program 1: mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:14 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:14 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x2000000], 0xf}}, 0x1c) 00:20:14 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:14 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:14 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x3000000], 0xf}}, 0x1c) 00:20:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e) 00:20:14 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:14 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x4000000], 0xf}}, 0x1c) 00:20:15 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7c", 0x70, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:15 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:15 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x7000000], 0xf}}, 0x1c) 00:20:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x300) 00:20:15 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x8000000], 0xf}}, 0x1c) 00:20:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:15 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x500) 00:20:15 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7c", 0x70, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 309.656839][T27850] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 309.668591][T27850] FAT-fs (loop5): Filesystem has been set read-only [ 309.676159][T27850] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 309.691731][T27849] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:15 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x9000000], 0xf}}, 0x1c) 00:20:15 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xa000000], 0xf}}, 0x1c) 00:20:16 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x600) [ 310.136253][T27872] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 00:20:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xe000000], 0xf}}, 0x1c) [ 310.197350][T27872] FAT-fs (loop5): Filesystem has been set read-only [ 310.233405][T27872] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:16 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) [ 310.281882][T27867] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:16 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c9", 0xa8, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x700) 00:20:16 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x13000000], 0xf}}, 0x1c) 00:20:16 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x0) 00:20:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:16 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x20000000], 0xf}}, 0x1c) 00:20:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2000) 00:20:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:17 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x0) 00:20:17 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x3f000000], 0xf}}, 0x1c) 00:20:17 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c9", 0xa8, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x4000) 00:20:17 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x0) 00:20:17 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x40000000], 0xf}}, 0x1c) 00:20:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:17 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x58000000], 0xf}}, 0x1c) 00:20:17 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7c", 0x70, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x60ff) 00:20:18 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:18 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x5c000000], 0xf}}, 0x1c) 00:20:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:18 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c9", 0xa8, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:18 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7c", 0x70, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:18 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x60000000], 0xf}}, 0x1c) 00:20:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7600) 00:20:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:18 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x7f000000], 0xf}}, 0x1c) [ 312.492907][T28119] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 312.586992][T28119] FAT-fs (loop0): Filesystem has been set read-only [ 312.607563][T28119] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 312.680177][T28119] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:18 executing program 1: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7c", 0x70, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 312.733396][T28119] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 312.770430][T28118] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00) 00:20:18 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:18 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x8dffffff], 0xf}}, 0x1c) [ 312.786283][T28211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 312.801666][T28211] FAT-fs (loop5): Filesystem has been set read-only [ 312.819877][T28211] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 312.904750][T28211] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 312.934456][T28211] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:18 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xc05d0000], 0xf}}, 0x1c) [ 313.057331][T28209] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:19 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d", 0xc4, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x9600) 00:20:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:19 executing program 1 (fault-call:4 fault-nth:0): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xe8030000], 0xf}}, 0x1c) 00:20:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x200000) 00:20:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xf4010000], 0xf}}, 0x1c) 00:20:19 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x8) 00:20:19 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d", 0xc4, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:19 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r0, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xf5ffffff], 0xf}}, 0x1c) 00:20:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:19 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x2, 0x8) 00:20:19 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x400000) 00:20:19 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xffffff8d], 0xf}}, 0x1c) 00:20:20 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xfffffff5], 0xf}}, 0x1c) [ 314.098821][T28412] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 00:20:20 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x101e, 0x8) 00:20:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x50f000) [ 314.226466][T28412] FAT-fs (loop5): Filesystem has been set read-only 00:20:20 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x100000000000000], 0xf}}, 0x1c) 00:20:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 314.339304][T28412] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 314.396229][T28412] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 314.445712][T28412] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 314.502947][T28407] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:20 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d", 0xc4, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:20 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:20 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x200000000000000], 0xf}}, 0x1c) 00:20:20 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x2) 00:20:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x707100) [ 314.847069][T28662] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 314.856179][T28662] FAT-fs (loop5): Filesystem has been set read-only [ 314.864289][T28662] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 314.873948][T28662] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 314.888175][T28662] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:20 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x300000000000000], 0xf}}, 0x1c) [ 314.931936][T28661] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 00:20:20 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x3) 00:20:21 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea", 0xd2, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:21 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x400000000000000], 0xf}}, 0x1c) 00:20:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x70e000) 00:20:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 315.290357][T28784] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:21 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x700000000000000], 0xf}}, 0x1c) [ 315.353670][T28784] FAT-fs (loop0): Filesystem has been set read-only [ 315.380506][T28784] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 00:20:21 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:21 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x4) 00:20:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x717000) 00:20:21 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x800000000000000], 0xf}}, 0x1c) 00:20:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:21 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x9) 00:20:21 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x900000000000000], 0xf}}, 0x1c) 00:20:21 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea", 0xd2, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x760000) 00:20:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xa00000000000000], 0xf}}, 0x1c) 00:20:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x14) 00:20:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:22 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:20:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0xe00000000000000], 0xf}}, 0x1c) 00:20:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x80ffff) 00:20:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001d4000/0x2000)=nil, 0x2000) mlock(&(0x7f00000f6000/0x2000)=nil, 0x2000) madvise(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x15) [ 316.670442][T29273] page:ffffea0000dc3cc0 refcount:2 mapcount:1 mapping:ffff88809798da39 index:0x200f3 00:20:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:20:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x1300000000000000], 0xf}}, 0x1c) [ 316.761413][T29273] anon [ 316.761427][T29273] flags: 0x1fffc000008002d(locked|uptodate|dirty|active|swapbacked) [ 316.777102][T29273] raw: 01fffc000008002d dead000000000100 dead000000000122 ffff88809798da39 00:20:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x960000) [ 316.837602][T29273] raw: 00000000000200f3 0000000000000000 0000000200000000 ffff8880980a4d40 [ 316.891298][T29273] page dumped because: VM_BUG_ON_PAGE(PageActive(page)) 00:20:22 executing program 5: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22, 0xfffffffffffffffd}, 0x3) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea", 0xd2, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 316.982125][T29273] page->mem_cgroup:ffff8880980a4d40 00:20:23 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x2000000000000000], 0xf}}, 0x1c) [ 317.023296][T29273] ------------[ cut here ]------------ [ 317.028789][T29273] kernel BUG at mm/vmscan.c:1156! [ 317.063213][T29273] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 317.069203][T29292] kobject: 'kvm' (00000000c67834dc): kobject_uevent_env [ 317.069329][T29273] CPU: 0 PID: 29273 Comm: syz-executor.1 Not tainted 5.3.0-rc2-next-20190802 #58 [ 317.076449][T29292] kobject: 'kvm' (00000000c67834dc): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 317.085349][T29273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.085372][T29273] RIP: 0010:shrink_page_list+0x2872/0x5430 [ 317.085388][T29273] Code: d9 ea ff ff e8 9f 26 dd ff 4c 8d 6b ff e9 1c db ff ff e8 91 26 dd ff 48 8b bd 10 ff ff ff 48 c7 c6 00 88 93 87 e8 0e 12 07 00 <0f> 0b e8 77 26 dd ff be 08 00 00 00 4c 89 ef e8 fa f3 17 00 4c 89 [ 317.085396][T29273] RSP: 0018:ffff88808d747598 EFLAGS: 00010246 [ 317.085406][T29273] RAX: 0000000000040000 RBX: 0000000000000020 RCX: ffffc90008162000 [ 317.085415][T29273] RDX: 0000000000040000 RSI: ffffffff819c1ec7 RDI: ffffed1011ae8e97 [ 317.085431][T29273] RBP: ffff88808d747730 R08: 0000000000000021 R09: ffffed1015d060d1 [ 317.113436][T29291] kobject: 'kvm' (00000000c67834dc): kobject_uevent_env [ 317.130667][T29273] R10: ffffed1015d060d0 R11: ffff8880ae830687 R12: dffffc0000000000 [ 317.130682][T29273] R13: ffffea0000dc3cc0 R14: 0000000000000000 R15: ffffea0000dc3cc8 [ 317.130700][T29273] FS: 00007feefb3bc700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 317.130713][T29273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.130727][T29273] CR2: 0000000065f4ff69 CR3: 00000000a3602000 CR4: 00000000001426f0 [ 317.130745][T29273] Call Trace: [ 317.136991][T29291] kobject: 'kvm' (00000000c67834dc): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 317.144772][T29273] ? rwlock_bug.part.0+0x90/0x90 [ 317.144792][T29273] ? debug_check_no_obj_freed+0xc0/0x43f [ 317.144812][T29273] ? page_evictable+0x3b0/0x3b0 [ 317.144828][T29273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.144849][T29273] ? debug_smp_processor_id+0x3c/0x214 [ 317.247122][T29273] ? lock_downgrade+0x920/0x920 [ 317.251988][T29273] ? trace_hardirqs_on+0x67/0x240 [ 317.257030][T29273] reclaim_pages+0x3b8/0x8f0 [ 317.261634][T29273] ? reclaim_clean_pages_from_list+0xc80/0xc80 [ 317.267972][T29273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.274229][T29273] ? lock_downgrade+0x920/0x920 [ 317.279088][T29273] ? __kasan_check_read+0x11/0x20 [ 317.284121][T29273] ? _raw_spin_unlock_irq+0x5e/0x90 [ 317.289321][T29273] ? __kasan_check_read+0x11/0x20 [ 317.294353][T29273] ? do_raw_spin_unlock+0x57/0x270 [ 317.299474][T29273] madvise_cold_or_pageout_pte_range+0x2264/0x2e20 [ 317.305986][T29273] ? swapin_walk_pmd_entry+0x670/0x670 [ 317.311449][T29273] ? preempt_schedule+0x4b/0x60 [ 317.316310][T29273] ? swapin_walk_pmd_entry+0x670/0x670 [ 317.321783][T29273] __walk_page_range+0xd2a/0x1680 [ 317.326814][T29273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.333068][T29273] walk_page_range+0x1a6/0x3e0 [ 317.337840][T29273] madvise_pageout_page_range.isra.0+0xdd/0x120 [ 317.344086][T29273] ? madvise_cold+0x210/0x210 [ 317.348771][T29273] ? swapin_walk_pmd_entry+0x670/0x670 [ 317.354238][T29273] ? mark_held_locks+0xf0/0xf0 [ 317.359012][T29273] ? __kasan_check_write+0x14/0x20 [ 317.364134][T29273] madvise_pageout+0x227/0x3a0 [ 317.368913][T29273] ? madvise_pageout_page_range.isra.0+0x120/0x120 [ 317.375430][T29273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.381681][T29273] ? vmacache_update+0x114/0x140 [ 317.386743][T29273] ? find_vma+0x30/0x170 [ 317.391003][T29273] __x64_sys_madvise+0x719/0x1500 [ 317.396039][T29273] ? madvise_free_pte_range+0x2580/0x2580 [ 317.401765][T29273] ? 0xffffffff81000000 [ 317.405940][T29273] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 317.412016][T29273] ? trace_hardirqs_off_caller+0x65/0x230 [ 317.417752][T29273] do_syscall_64+0xfa/0x760 [ 317.422262][T29273] ? do_syscall_64+0xfa/0x760 [ 317.426948][T29273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.432839][T29273] RIP: 0033:0x459829 [ 317.436747][T29273] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.456359][T29273] RSP: 002b:00007feefb3bbc78 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 317.464777][T29273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459829 00:20:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) fanotify_init(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xe07000) [ 317.472753][T29273] RDX: 0000000000000015 RSI: 0000000000001000 RDI: 00000000200f3000 [ 317.480735][T29273] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 317.488714][T29273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feefb3bc6d4 [ 317.496697][T29273] R13: 00000000004c5c85 R14: 00000000004da530 R15: 00000000ffffffff [ 317.504688][T29273] Modules linked in: [ 317.516289][T29273] ---[ end trace e007922f9c0be07a ]--- [ 317.523380][T10259] kobject: 'loop5' (000000006a619b54): kobject_uevent_env [ 317.525783][T29273] RIP: 0010:shrink_page_list+0x2872/0x5430 [ 317.530623][T10259] kobject: 'loop5' (000000006a619b54): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 317.536875][T29273] Code: d9 ea ff ff e8 9f 26 dd ff 4c 8d 6b ff e9 1c db ff ff e8 91 26 dd ff 48 8b bd 10 ff ff ff 48 c7 c6 00 88 93 87 e8 0e 12 07 00 <0f> 0b e8 77 26 dd ff be 08 00 00 00 4c 89 ef e8 fa f3 17 00 4c 89 [ 317.569259][T29273] RSP: 0018:ffff88808d747598 EFLAGS: 00010246 [ 317.575686][T29273] RAX: 0000000000040000 RBX: 0000000000000020 RCX: ffffc90008162000 [ 317.586765][T29273] RDX: 0000000000040000 RSI: ffffffff819c1ec7 RDI: ffffed1011ae8e97 [ 317.606447][ T3878] kobject: 'loop4' (00000000439cff58): kobject_uevent_env [ 317.633313][ T3878] kobject: 'loop4' (00000000439cff58): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 317.635404][T29298] kobject: 'kvm' (00000000c67834dc): kobject_uevent_env [ 317.651009][T29273] RBP: ffff88808d747730 R08: 0000000000000021 R09: ffffed1015d060d1 [ 317.669534][T29290] kobject: 'kvm' (00000000c67834dc): kobject_uevent_env 00:20:23 executing program 0: openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000001880), 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x0) sendto$x25(r1, &(0x7f0000000300)="ff7c5700823afc6bb0cbfd046f1edb8240647825b59c00672a6ae1dd51dabfae032423550e55990d27c03b9223021c414c66a0a2e868f5e66a525497db9ca94b6fb49a063ec5f3b32030ea98bc45ae043d820110fc131cdca0a966666cfad78d4c49a102922a5cd49ac5e878baafaa7cb75aa2ae0ee1dda0f786b02700e71ac5b4d50cbc1f3d6016a1852b2a969362d9c6d6f4fab02e71efe62e6e10ffc1be4fdffa1edcdc0656c92fc51d9522c774aae733f1354680c66ef3bf21c13fd4953d4501429d1f820ab67bc22eb67b7cf9a76cea9dbac3563932c68ae41dfdce14cf", 0xe0, 0x801, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x5, 0x0, 0x0, 0xa, 0x0, 0x2, 0x6}}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f4273003c84196e244c3c7ab824de09f03fae974f6dca86da9bf3fbcafb95df18332d1444e01fa96c6fad4a56c5ddd09592f71dd4791d0000782030f41f535c3d11c0a0af5eaf3550843f48daf42f0dbe9f887098f6722ebefd8b93b3be8c9169593a02003df7cc8b72091970cb29beb9a083659a4b034a7c4e1847a1e7db68804a249e16ac9e20ccd3399ff3b5cef38800"], 0x92) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) [ 317.679839][T29290] kobject: 'kvm' (00000000c67834dc): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 317.696573][ T3878] kobject: 'loop2' (00000000d25aca39): kobject_uevent_env [ 317.701452][T29298] kobject: 'kvm' (00000000c67834dc): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 317.711020][T29273] R10: ffffed1015d060d0 R11: ffff8880ae830687 R12: dffffc0000000000 [ 317.714843][ T3878] kobject: 'loop2' (00000000d25aca39): fill_kobj_path: path = '/devices/virtual/block/loop2' 00:20:23 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x700000000000000, 0x0, 0x3f00000000000000], 0xf}}, 0x1c) 00:20:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="26640f48d16626660f388103660fc73366b8c70000000f23d80f21f86635000000900f23f8262e0f08f00fab9569fff4650fc734ba200066ed67dc5ca002", 0x3e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x2e5, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0x40001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 317.722193][T29301] kobject: 'loop5' (000000006a619b54): kobject_uevent_env [ 317.745628][T29273] R13: ffffea0000dc3cc0 R14: 0000000000000000 R15: ffffea0000dc3cc8 [ 317.762664][T29273] FS: 00007feefb3bc700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 317.783607][T29301] kobject: 'loop5' (000000006a619b54): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 317.784308][T29297] kobject: 'kvm' (00000000c67834dc): kobject_uevent_env [ 317.819966][T29273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.842268][T29297] kobject: 'kvm' (00000000c67834dc): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 317.852364][T29273] CR2: 00005555556e8978 CR3: 00000000a3602000 CR4: 00000000001426f0 [ 317.860749][T29273] Kernel panic - not syncing: Fatal exception [ 317.867925][T29273] Kernel Offset: disabled [ 317.872249][T29273] Rebooting in 86400 seconds..