0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1039.819116] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1039.827890] FAT-fs (loop1): Filesystem has been set read-only [ 1039.834136] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970771) [ 1039.902244] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1039.912814] FAT-fs (loop3): Filesystem has been set read-only [ 1039.919467] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, 0x0, &(0x7f0000000600)) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1041.051006] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1041.059401] FAT-fs (loop3): Filesystem has been set read-only [ 1041.066329] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1041.429065] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1041.437486] FAT-fs (loop1): Filesystem has been set read-only [ 1041.443980] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1043.627417] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1043.636166] FAT-fs (loop5): Filesystem has been set read-only [ 1043.643380] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1043.970801] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1043.979212] FAT-fs (loop1): Filesystem has been set read-only [ 1043.985646] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:49:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1044.277819] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1044.286193] FAT-fs (loop3): Filesystem has been set read-only [ 1044.292993] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) [ 1044.645697] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1044.654203] FAT-fs (loop4): Filesystem has been set read-only [ 1044.660885] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1045.115814] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1045.124240] FAT-fs (loop5): Filesystem has been set read-only [ 1045.130433] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) [ 1045.457441] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1045.467450] FAT-fs (loop3): Filesystem has been set read-only [ 1045.473807] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, 0x0, &(0x7f0000000600)) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) [ 1046.708092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1046.716519] FAT-fs (loop3): Filesystem has been set read-only [ 1046.722793] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1046.818553] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1046.827048] FAT-fs (loop4): Filesystem has been set read-only [ 1046.833221] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:49:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1047.869089] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1047.878048] FAT-fs (loop3): Filesystem has been set read-only [ 1047.884319] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, 0x0, &(0x7f0000000600)) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:49:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x5c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:49:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1049.400815] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1049.409617] FAT-fs (loop3): Filesystem has been set read-only [ 1049.416203] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, 0x0, &(0x7f0000000600)) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x5c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x5, 0xf4) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) getsockname$packet(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, r4, &(0x7f0000000180)=0x5, 0x0) [ 1050.209194] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1050.218099] FAT-fs (loop0): Filesystem has been set read-only [ 1050.224305] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) [ 1050.402932] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1050.411747] FAT-fs (loop3): Filesystem has been set read-only [ 1050.418219] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) [ 1050.448143] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1050.456723] FAT-fs (loop1): Filesystem has been set read-only [ 1050.463381] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, 0x0) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x5c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1051.309740] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1051.319861] FAT-fs (loop0): Filesystem has been set read-only [ 1051.326865] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) [ 1051.488635] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1051.577396] FAT-fs (loop5): Filesystem has been set read-only [ 1051.636778] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1051.646357] FAT-fs (loop3): Filesystem has been set read-only [ 1051.652994] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) [ 1051.759423] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1051.769057] FAT-fs (loop1): Filesystem has been set read-only [ 1051.776343] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970771) [ 1051.863180] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, 0x0) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x5c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x0, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1052.563957] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1052.573385] FAT-fs (loop3): Filesystem has been set read-only [ 1052.761145] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x5c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1053.062350] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1053.071286] FAT-fs (loop1): Filesystem has been set read-only [ 1053.077643] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r3, r5, &(0x7f0000000180)=0x5, 0x0) [ 1053.187608] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1053.200167] FAT-fs (loop4): Filesystem has been set read-only [ 1053.206414] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, 0x0) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x0, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1053.286051] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1053.295320] FAT-fs (loop2): Filesystem has been set read-only [ 1053.301742] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1053.639078] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1053.648075] FAT-fs (loop3): Filesystem has been set read-only [ 1053.654751] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x0, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, 0x0) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1053.920238] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1053.928529] FAT-fs (loop0): Filesystem has been set read-only [ 1053.934622] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 970771) [ 1054.146647] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1054.155023] FAT-fs (loop1): Filesystem has been set read-only [ 1054.161116] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x0, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1054.556167] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1054.564909] FAT-fs (loop4): Filesystem has been set read-only [ 1054.571309] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x0, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1054.836228] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1054.844807] FAT-fs (loop3): Filesystem has been set read-only [ 1054.852039] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1055.272694] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1055.281145] FAT-fs (loop0): Filesystem has been set read-only [ 1055.287323] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1055.386513] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1055.395107] FAT-fs (loop1): Filesystem has been set read-only [ 1055.401319] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, r6, &(0x7f0000000180)=0x5, 0x0) [ 1055.849861] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1055.858511] FAT-fs (loop4): Filesystem has been set read-only [ 1055.865075] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:45 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:45 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1056.452377] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1056.460976] FAT-fs (loop3): Filesystem has been set read-only [ 1056.481720] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, r5, &(0x7f0000000180)=0x5, 0x0) [ 1056.698212] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1056.723511] FAT-fs (loop0): Filesystem has been set read-only [ 1056.740461] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:46 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1057.733056] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1057.741617] FAT-fs (loop3): Filesystem has been set read-only [ 1057.747968] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r3, r5, &(0x7f0000000180)=0x5, 0x0) 17:49:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1059.151631] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1059.159942] FAT-fs (loop3): Filesystem has been set read-only [ 1059.166224] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1059.780542] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1059.789095] FAT-fs (loop2): Filesystem has been set read-only [ 1059.795460] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r3, r5, &(0x7f0000000180)=0x5, 0x0) 17:49:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r3, r5, &(0x7f0000000180)=0x5, 0x0) [ 1060.264649] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1060.273136] FAT-fs (loop3): Filesystem has been set read-only [ 1060.279151] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) [ 1060.436762] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1060.445227] FAT-fs (loop0): Filesystem has been set read-only [ 1060.455880] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r3, r5, &(0x7f0000000180)=0x5, 0x0) 17:49:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1061.383658] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1061.392061] FAT-fs (loop3): Filesystem has been set read-only [ 1061.398062] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1061.661812] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1061.670362] FAT-fs (loop4): Filesystem has been set read-only [ 1061.676606] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1062.281421] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1062.290119] FAT-fs (loop3): Filesystem has been set read-only [ 1062.296824] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) [ 1062.492525] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1062.501154] FAT-fs (loop2): Filesystem has been set read-only [ 1062.507950] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:49:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r3, r5, &(0x7f0000000180)=0x5, 0x0) [ 1063.602232] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1063.611141] FAT-fs (loop3): Filesystem has been set read-only [ 1063.617480] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) 17:49:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r3, r5, &(0x7f0000000180)=0x5, 0x0) 17:49:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1063.879289] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1063.887896] FAT-fs (loop2): Filesystem has been set read-only [ 1063.894025] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1064.428221] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1064.436828] FAT-fs (loop4): Filesystem has been set read-only [ 1064.443108] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, 0x0, 0x0) [ 1064.710796] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1064.719059] FAT-fs (loop3): Filesystem has been set read-only [ 1064.725201] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1065.282105] audit: type=1804 audit(1582566594.795:173): pid=31124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir880053408/syzkaller.84vi7l/1020/file0" dev="sda1" ino=17650 res=1 17:49:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:49:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x68) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1065.654022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1065.662944] FAT-fs (loop3): Filesystem has been set read-only [ 1065.669792] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1065.869228] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1065.878064] FAT-fs (loop5): Filesystem has been set read-only [ 1065.884805] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) 17:49:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) 17:49:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:49:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x0, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:49:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 1066.822190] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1066.831238] FAT-fs (loop3): Filesystem has been set read-only [ 1066.838011] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1066.860884] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1066.870183] FAT-fs (loop4): Filesystem has been set read-only [ 1066.876782] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff0600000005000000450000002500000019000a000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff0600000005000000450000002500000019000a00040012957a59721252fa04000000000000006d", 0x37}, {&(0x7f0000000180)="52f4", 0x2}], 0x2) 17:49:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0xf4) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:56 executing program 0: socket(0x0, 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 17:49:56 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 17:49:56 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_genetlink_get_family_id$SEG6(0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000100)) umount2(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x81, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) 17:49:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x0, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:57 executing program 0: socket(0x0, 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) [ 1067.528004] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1067.604281] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 17:49:57 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 17:49:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) [ 1067.766186] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1067.774845] FAT-fs (loop3): Filesystem has been set read-only [ 1067.781281] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:57 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="83"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="ea004000000000008741c434b2e8307d0315ffceda5482427a7b209539e64169d6b720e7565e82e5b44f8ef95c9909647ed7e253afff279340ab298c7801345f241f79cc326a02efc217ad50019500cc9a7c1188ac76d800000000c3366939a939668f38b1ea16877e58c4f151f13af28dad8cf20191f300"/129], 0x8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r1, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="8479107038508861ddc2bd7384fbc8a1b7e4ff"], 0x17) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 17:49:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:49:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 17:49:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000001080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) recvmsg$can_raw(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r3 = gettid() r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0x3) fcntl$setsig(r5, 0xa, 0x12) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r3, 0x15) 17:49:57 executing program 4: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x6}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r2) memfd_create(0x0, 0x0) memfd_create(0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000040)=""/113) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x2, 0x7, 0x9, 0x400, 0xfffffc00, 0x3c}, 0x0) chown(&(0x7f0000000040)='./file0\x00', r5, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) 17:49:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250200000000000000000200000008000100", @ANYRES32=r2, @ANYBLOB="040002800e45174fbe"], 0x20}}, 0x0) 17:49:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 17:49:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x800000003, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000008000100687462001c00020018000200030000000000000000"], 0x48}}, 0x0) [ 1068.327432] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1068.336067] FAT-fs (loop5): Filesystem has been set read-only [ 1068.342497] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 17:49:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x0, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001e005f0214fffffffffffff8070000000000000000000000080008000d000000", 0x24) 17:49:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) getpid() ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x800000}) 17:49:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1068.776526] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1068.785228] FAT-fs (loop3): Filesystem has been set read-only [ 1068.791516] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:49:58 executing program 2: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x6}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r2) memfd_create(0x0, 0x0) memfd_create(0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000040)=""/113) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x2, 0x7, 0x9, 0x400, 0xfffffc00, 0x3c}, 0x0) chown(&(0x7f0000000040)='./file0\x00', r5, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) 17:49:58 executing program 4: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x6}, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r2) memfd_create(0x0, 0x0) memfd_create(0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) ftruncate(r3, 0x8200) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000040)=""/113) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x2, 0x7, 0x9, 0x400, 0xfffffc00, 0x3c}, 0x0) chown(&(0x7f0000000040)='./file0\x00', r5, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) 17:49:58 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x8, 0xea43, 0x0, r2}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) 17:49:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:49:58 executing program 5: syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x100000008d}, 0x0) gettid() close(0xffffffffffffffff) getpriority(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, 0x0) 17:49:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 17:49:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) dup(r0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) r2 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0xfe96}], 0x1, 0x81003) sendfile(r1, r2, 0x0, 0x102002700) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 17:49:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2e00000052008102a00f80854a36b8ab1c9599161a000500030000000000000020000220000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) 17:49:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:58 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) 17:49:59 executing program 0: 17:49:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d72646d61594e0b9ca1019caa07d6eaf30953135571f4ba218173f2fb4eb2"]) 17:49:59 executing program 2: 17:49:59 executing program 2: [ 1069.618541] 9pnet: Could not find request transport: rdmaYN œ¡œªÖêó SUqôº!sòûN² [ 1069.657209] 9pnet: Could not find request transport: rdmaYN œ¡œªÖêó SUqôº!sòûN² 17:49:59 executing program 4: [ 1069.705955] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 1069.766023] overlayfs: fs on 'file0' does not support file handles, falling back to index=off. [ 1069.767719] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1069.783539] FAT-fs (loop3): Filesystem has been set read-only [ 1069.789526] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:49:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:49:59 executing program 0: 17:49:59 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x3, 0x70, 0x3e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x91dd7106ca8f533b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x3}, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000007, 0x2}, 0x0, 0x10000000c, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="fac6f48a858f770c41b683c247ada0b02dcaf147b522b7bd70a2fa3b25a08c34c551e155ecbe25bcf4019bc3d94cbb8047d3b2f12a0c9ebdb7c14ef54e63d8bc9abf3815e913bdcf9392a0fd336019e9f27c57751f439779dc9553cbe7141fcd50f30443b2243037483a0328352a5bd816fb3783e4715b7d44"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r2, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x400c00) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r13 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r14 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r12, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffe29) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r17 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r17, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r17, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r18 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r18, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r20 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r20, 0x1, 0x3e, &(0x7f00000002c0)=r19, 0x4) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e24e5e000000000000008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a745f801ff110026e6d2efe31ab7ea0c34f17e3ad6ef3bb62203099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7eaa49c62ba0fe52fa65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba53246dfebd31a08b32808b802000000000000ea334d8323893c5337669dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a4ecdc7cec61ce63000000800117009a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4a9590c35c4a84296697ab4390af9a9ceafd07e00000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x62}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r21, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) r22 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000001a80)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c000000004000000000000000900000d000000000f0000000200000010000000030000000a0000000400000009000000020000000d000000040000000e000000010000000c00000000000000040000000400000003000000050000000900000000000008010000000f000000000000010000000057007500010000000000000900000000060000000000000200000000000e0300000000000000010000000200000604000000100000000002000007000000f7ffffff0b000000000000020200000000610000"], &(0x7f0000000780)=""/111, 0xdc, 0x6f}, 0x20) r23 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r23, 0x890b, &(0x7f0000000000)) r24 = socket$inet6_tcp(0xa, 0x1, 0x0) r25 = dup2(r24, r24) ioctl$PERF_EVENT_IOC_ENABLE(r25, 0x8912, 0x400200) r26 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x7, &(0x7f0000004240)=ANY=[@ANYRESOCT=r25, @ANYPTR=&(0x7f0000001bc0)=ANY=[@ANYPTR64=&(0x7f0000001b80)=ANY=[@ANYPTR64, @ANYRES32], @ANYRESHEX, @ANYRESHEX, @ANYBLOB="3470efa550bfc38690cf0c02383293da48c88b1bcb0f61923666e9995853b6548ff7a590a106b397e533ca50d3b22ad4b9461bb21051496e01cd4967d20e1dc94392bb1236ed36981c0681d9943d072f1f26bf8b7d4c00f838c09636d182d1ce6215509ef45f74c43620a4c49f66d45e412c2b342decdce0ec1e50381ad0800d4664271a82833e578011a966d090774f37c927092c9bf1f560d3d673b8db49ec40fb1b9c144c0eff3cc433be9fcc637b4ed91be8ef7f027332a61a2b1a1bee552d94c76aab0af979238fd4fbb2b2bc332643189f3cbc3f38cae11a728c4f27060c7f5f1efd71fafb3e39db8f44b258f74a2fd4", @ANYRESOCT=r23, @ANYRESDEC], @ANYRESOCT=r11, @ANYRES32=r14], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41100, 0x8, [], 0x0, 0x13, r22, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r16, 0x89e0, &(0x7f0000000500)={r14, r26}) socketpair(0x0, 0x0, 0x0, 0x0) 17:49:59 executing program 5: 17:49:59 executing program 4: 17:49:59 executing program 4: 17:49:59 executing program 0: 17:49:59 executing program 5: 17:49:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:49:59 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x3, 0x70, 0x3e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x91dd7106ca8f533b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x3}, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000007, 0x2}, 0x0, 0x10000000c, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="fac6f48a858f770c41b683c247ada0b02dcaf147b522b7bd70a2fa3b25a08c34c551e155ecbe25bcf4019bc3d94cbb8047d3b2f12a0c9ebdb7c14ef54e63d8bc9abf3815e913bdcf9392a0fd336019e9f27c57751f439779dc9553cbe7141fcd50f30443b2243037483a0328352a5bd816fb3783e4715b7d44"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r2, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x400c00) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r13 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r14 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r12, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffe29) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r17 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r17, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r17, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r18 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r18, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r20 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r20, 0x1, 0x3e, &(0x7f00000002c0)=r19, 0x4) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x62}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r21, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) r22 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000001a80)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c000000004000000000000000900000d000000000f0000000200000010000000030000000a0000000400000009000000020000000d000000040000000e000000010000000c00000000000000040000000400000003000000050000000900000000000008010000000f000000000000010000000057007500010000000000000900000000060000000000000200000000000e0300000000000000010000000200000604000000100000000002000007000000f7ffffff0b000000000000020200000000610000"], &(0x7f0000000780)=""/111, 0xdc, 0x6f}, 0x20) r23 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r23, 0x890b, &(0x7f0000000000)) r24 = socket$inet6_tcp(0xa, 0x1, 0x0) r25 = dup2(r24, r24) ioctl$PERF_EVENT_IOC_ENABLE(r25, 0x8912, 0x400200) r26 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x7, &(0x7f0000004240)=ANY=[@ANYRESOCT=r25, @ANYPTR=&(0x7f0000001bc0)=ANY=[@ANYPTR64=&(0x7f0000001b80)=ANY=[@ANYPTR64, @ANYRES32], @ANYRESHEX, @ANYRESHEX, @ANYBLOB="3470efa550bfc38690cf0c02383293da48c88b1bcb0f61923666e9995853b6548ff7a590a106b397e533ca50d3b22ad4b9461bb21051496e01cd4967d20e1dc94392bb1236ed36981c0681d9943d072f1f26bf8b7d4c00f838c09636d182d1ce6215509ef45f74c43620a4c49f66d45e412c2b342decdce0ec1e50381ad0800d4664271a82833e578011a966d090774f37c927092c9bf1f560d3d673b8db49ec40fb1b9c144c0eff3cc433be9fcc637b4ed91be8ef7f027332a61a2b1a1bee552d94c76aab0af979238fd4fbb2b2bc332643189f3cbc3f38cae11a728c4f27060c7f5f1efd71fafb3e39db8f44b258f74a2fd4", @ANYRESOCT=r23, @ANYRESDEC], @ANYRESOCT=r11, @ANYRES32=r14], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41100, 0x8, [], 0x0, 0x13, r22, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r16, 0x89e0, &(0x7f0000000500)={r14, r26}) socketpair(0x0, 0x0, 0x0, 0x0) 17:50:00 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x3, 0x70, 0x3e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x91dd7106ca8f533b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x3}, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000007, 0x2}, 0x0, 0x10000000c, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="fac6f48a858f770c41b683c247ada0b02dcaf147b522b7bd70a2fa3b25a08c34c551e155ecbe25bcf4019bc3d94cbb8047d3b2f12a0c9ebdb7c14ef54e63d8bc9abf3815e913bdcf9392a0fd336019e9f27c57751f439779dc9553cbe7141fcd50f30443b2243037483a0328352a5bd816fb3783e4715b7d44"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r2, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x400c00) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r13 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r14 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r12, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffe29) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r13, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r17 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r17, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r17, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r18 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r18, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r20 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r20, 0x1, 0x3e, &(0x7f00000002c0)=r19, 0x4) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x62}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r21, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) r22 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000001a80)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c000000004000000000000000900000d000000000f0000000200000010000000030000000a0000000400000009000000020000000d000000040000000e000000010000000c00000000000000040000000400000003000000050000000900000000000008010000000f000000000000010000000057007500010000000000000900000000060000000000000200000000000e0300000000000000010000000200000604000000100000000002000007000000f7ffffff0b000000000000020200000000610000"], &(0x7f0000000780)=""/111, 0xdc, 0x6f}, 0x20) r23 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r23, 0x890b, &(0x7f0000000000)) r24 = socket$inet6_tcp(0xa, 0x1, 0x0) r25 = dup2(r24, r24) ioctl$PERF_EVENT_IOC_ENABLE(r25, 0x8912, 0x400200) r26 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x7, &(0x7f0000004240)=ANY=[@ANYRESOCT=r25, @ANYPTR=&(0x7f0000001bc0)=ANY=[@ANYPTR64=&(0x7f0000001b80)=ANY=[@ANYPTR64, @ANYRES32], @ANYRESHEX, @ANYRESHEX, @ANYBLOB="3470efa550bfc38690cf0c02383293da48c88b1bcb0f61923666e9995853b6548ff7a590a106b397e533ca50d3b22ad4b9461bb21051496e01cd4967d20e1dc94392bb1236ed36981c0681d9943d072f1f26bf8b7d4c00f838c09636d182d1ce6215509ef45f74c43620a4c49f66d45e412c2b342decdce0ec1e50381ad0800d4664271a82833e578011a966d090774f37c927092c9bf1f560d3d673b8db49ec40fb1b9c144c0eff3cc433be9fcc637b4ed91be8ef7f027332a61a2b1a1bee552d94c76aab0af979238fd4fbb2b2bc332643189f3cbc3f38cae11a728c4f27060c7f5f1efd71fafb3e39db8f44b258f74a2fd4", @ANYRESOCT=r23, @ANYRESDEC], @ANYRESOCT=r11, @ANYRES32=r14], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41100, 0x8, [], 0x0, 0x13, r22, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r16, 0x89e0, &(0x7f0000000500)={r14, r26}) socketpair(0x0, 0x0, 0x0, 0x0) 17:50:00 executing program 4: [ 1070.713879] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1070.722436] FAT-fs (loop3): Filesystem has been set read-only [ 1070.728513] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1070.738121] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1070.746598] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x8405}}], 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:50:00 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) 17:50:00 executing program 4: 17:50:00 executing program 4: 17:50:00 executing program 5: 17:50:00 executing program 4: 17:50:00 executing program 5: 17:50:00 executing program 2: 17:50:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:00 executing program 4: 17:50:00 executing program 5: 17:50:00 executing program 2: [ 1071.590598] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1071.599197] FAT-fs (loop3): Filesystem has been set read-only [ 1071.605384] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:01 executing program 1: 17:50:01 executing program 0: 17:50:01 executing program 5: 17:50:01 executing program 4: 17:50:01 executing program 2: 17:50:01 executing program 4: 17:50:01 executing program 2: 17:50:01 executing program 5: 17:50:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:01 executing program 0: 17:50:01 executing program 1: 17:50:01 executing program 4: 17:50:01 executing program 2: 17:50:01 executing program 5: 17:50:01 executing program 0: 17:50:01 executing program 1: 17:50:01 executing program 2: openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_genetlink_get_family_id$SEG6(0x0) syz_open_dev$media(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) 17:50:01 executing program 4: 17:50:01 executing program 5: 17:50:02 executing program 1: [ 1072.538732] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1072.547292] FAT-fs (loop3): Filesystem has been set read-only [ 1072.553402] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:02 executing program 0: 17:50:02 executing program 4: 17:50:02 executing program 1: 17:50:02 executing program 5: 17:50:02 executing program 2: 17:50:02 executing program 5: 17:50:02 executing program 1: 17:50:02 executing program 4: 17:50:02 executing program 2: 17:50:02 executing program 0: 17:50:02 executing program 4: [ 1073.513080] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1073.521523] FAT-fs (loop3): Filesystem has been set read-only [ 1073.527515] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:03 executing program 2: 17:50:03 executing program 5: 17:50:03 executing program 1: 17:50:03 executing program 0: 17:50:03 executing program 4: 17:50:03 executing program 5: 17:50:03 executing program 0: 17:50:03 executing program 1: 17:50:03 executing program 4: 17:50:03 executing program 2: 17:50:03 executing program 1: [ 1074.525095] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1074.533723] FAT-fs (loop3): Filesystem has been set read-only [ 1074.539720] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000600)) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:04 executing program 0: 17:50:04 executing program 2: 17:50:04 executing program 5: 17:50:04 executing program 1: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = epoll_create(0x6) r5 = epoll_create(0x4) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f000000dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)) 17:50:04 executing program 4: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0xf63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) 17:50:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 17:50:04 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) r7 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES32=0x0], 0x6) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:04 executing program 5: 17:50:04 executing program 1: 17:50:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r3 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) stat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r4 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r4) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) r5 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x0) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, 0x0) fallocate(r6, 0x100000003, 0xfb7d, 0x0) r7 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) write$binfmt_elf64(r7, &(0x7f00000000c0)=ANY=[], 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x28120001) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = epoll_create1(0x0) fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 17:50:05 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) r7 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES32=0x0], 0x6) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) [ 1075.546988] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1075.555399] FAT-fs (loop3): Filesystem has been set read-only [ 1075.561556] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000600)) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) sendmmsg$alg(r4, &(0x7f0000005200)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a00)='L', 0x1}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 17:50:05 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) r7 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES32=0x0], 0x6) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) 17:50:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 17:50:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) sendmmsg$alg(r2, &(0x7f0000005200)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)='t', 0x1}], 0x1}], 0x1, 0x0) [ 1076.614666] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1076.623511] FAT-fs (loop3): Filesystem has been set read-only [ 1076.629509] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 17:50:06 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) set_tid_address(0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r1) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x320f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0xfffffffb, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) syz_genetlink_get_family_id$nbd(0x0) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000000440)="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") pipe(0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080), 0x2008000fffffffe) eventfd2(0x0, 0x80c00) 17:50:06 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe) getgid() sendfile(r2, r2, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) 17:50:06 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0xf63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000280)=ANY=[@ANYRES16], 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r2, 0x0, 0xffff) signalfd(r2, &(0x7f00000000c0)={[0x8]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) 17:50:06 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r3, 0x0) stat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r4, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r5, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, &(0x7f0000000040)=""/70, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=0x0], 0x6) fallocate(r4, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r12 = epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) [ 1076.904986] audit: type=1804 audit(1582566606.415:174): pid=31774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir862632197/syzkaller.ZoMOWu/834/bus" dev="sda1" ino=17696 res=1 17:50:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000600)) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:06 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) set_tid_address(0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r1) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x320f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0xfffffffb, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) syz_genetlink_get_family_id$nbd(0x0) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000000440)="5b49ad58f7d47c5073ee8fd897cce21284c2d8c9dd2189156f2cd7efbe2be9a63ca43dbed3bab9c319cea267faa378f41a16c32580a6ac9d0a670329f71fba74a8509ad77ff5a472c9beb915bf1ebb5eb2331fa295a64b94824210772713a4dc69a7527c68d81fe4de3989b29294f2abe4c4944e3333dc80cb81e8ae9841e19dad604e164f7accc807a74e6d50b8d7a38a94337872bd14a09c57700627dd2f4725590b0bf17a93d7dc4a555b870d8f877b83abb8c9e397c677d765556713d75fcd8b049be64d8ccf20db30b485349641f769f09c40b56503b0170bb7492e7176cea3844f338eb354ddafe5652d3abb5ee56c52fcd50b819d5fdc3d375836") pipe(0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080), 0x2008000fffffffe) eventfd2(0x0, 0x80c00) [ 1077.336407] audit: type=1804 audit(1582566606.845:175): pid=31774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir862632197/syzkaller.ZoMOWu/834/bus" dev="sda1" ino=17696 res=1 [ 1077.567431] audit: type=1804 audit(1582566607.075:176): pid=31798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir862632197/syzkaller.ZoMOWu/835/bus" dev="sda1" ino=16693 res=1 [ 1077.646387] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1077.655111] FAT-fs (loop3): Filesystem has been set read-only [ 1077.661329] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup2(r3, r4) 17:50:07 executing program 1: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:50:07 executing program 4: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) set_tid_address(0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r1) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x320f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0xfffffffb, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) syz_genetlink_get_family_id$nbd(0x0) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000300)=@in, 0x0, 0x800) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000000440)="5b49ad58f7d47c5073ee8fd897cce21284c2d8c9dd2189156f2cd7efbe2be9a63ca43dbed3bab9c319cea267faa378f41a16c32580a6ac9d0a670329f71fba74a8509ad77ff5a472c9beb915bf1ebb5eb2331fa295a64b94824210772713a4dc69a7527c68d81fe4de3989b29294f2abe4c4944e3333dc80cb81e8ae9841e19dad604e164f7accc807a74e6d50b8d7a38a94337872bd14a09c57700627dd2f4725590b0bf17a93d7dc4a555b870d8f877b83abb8c9e397c677d765556713d75fcd8b049be64d8ccf20db30b485349641f769f09c40b56503b0170bb7492e7176cea3844f338eb354ddafe5652d3abb5ee56c52fcd50b819d5fdc3d375836") pipe(0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080), 0x2008000fffffffe) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000180)={0x8, 0x20, 0xf, 0x1f, 0x2, 0xffffffff, 0x0, 0x83, 0xffffffffffffffff}) eventfd2(0x0, 0x80c00) 17:50:07 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) [ 1077.833962] audit: type=1804 audit(1582566607.255:177): pid=31777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723838303035333430382F73797A6B616C6C65722E38347669376C2F313034382F06 dev="sda1" ino=17554 res=1 17:50:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 17:50:07 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r7, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r8 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r8) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r9, &(0x7f0000000040)=""/70, 0x46) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r10, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r9, &(0x7f0000000400)=ANY=[@ANYRES16=r10, @ANYRES32=0x0], 0x6) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) r12 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r12, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r12, 0x100000003, 0xfb7d, 0x28120001) r13 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r13, 0x7ffffc, 0x0) write$binfmt_elf64(r13, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r13, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r14 = epoll_create1(0x0) fcntl$lock(r14, 0x7, &(0x7f0000000080)) fcntl$lock(r14, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:07 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe) getgid() sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) 17:50:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) munlockall() [ 1078.076762] audit: type=1804 audit(1582566607.545:178): pid=31830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir395434194/syzkaller.eqN3sp/785/bus" dev="sda1" ino=16820 res=1 [ 1078.167465] audit: type=1804 audit(1582566607.635:179): pid=31830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir395434194/syzkaller.eqN3sp/785/bus" dev="sda1" ino=16820 res=1 17:50:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) sendmmsg$alg(r4, &(0x7f0000005200)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="741c68a9452baec4817dd9ac17b6b3d9204cd3878d2e08a7dc91b3d31f27ed3d4448fc25eec42f07b9e60199229da53a0ea79b805e1b9e2eafc809effe25950d52b068b0aaad87e756e16c52ad3a7df6e49710a89ed04fbb6ebe1ea7fd40cd8c0e3e6fa25b4c42db2a03e25351aa6aa76c4459af052678c5aa8474b609e89b68c17c57fb320497528050f58bace0cff679b46dd94ae3e44f04d3f6e92f407b8e1872cfcab5447170055d7f61e7a0199871e758625f5e25453ae85f88f4786aca2c948cabb6dc2b3730764e69bcc0", 0xce}, {&(0x7f0000000a00)="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", 0xf32}], 0x2}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003200)=""/4091, 0x1000}], 0x1}}], 0x4000000000002d4, 0x0, 0x0) 17:50:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:08 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r7, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r8 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r8) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r9, &(0x7f0000000040)=""/70, 0x46) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r10, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r9, &(0x7f0000000400)=ANY=[@ANYRES16=r10, @ANYRES32=0x0], 0x6) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) r12 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r12, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r12, 0x100000003, 0xfb7d, 0x28120001) r13 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r13, 0x7ffffc, 0x0) write$binfmt_elf64(r13, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r13, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r14 = epoll_create1(0x0) fcntl$lock(r14, 0x7, &(0x7f0000000080)) fcntl$lock(r14, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:08 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(0x0, &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, &(0x7f0000000040)=""/70, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=0x0], 0x6) fallocate(r5, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) [ 1078.613966] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1078.622409] FAT-fs (loop3): Filesystem has been set read-only [ 1078.628605] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:08 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r6, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r7, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) r8 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r8) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r9, &(0x7f0000000040)=""/70, 0x46) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r10, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r9, &(0x7f0000000400)=ANY=[@ANYRES16=r10, @ANYRES32=0x0], 0x6) fallocate(r6, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) r12 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r12, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r12, 0x100000003, 0xfb7d, 0x28120001) r13 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r13, 0x7ffffc, 0x0) write$binfmt_elf64(r13, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r13, 0x100000003, 0xfb7d, 0x28120001) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r14 = epoll_create1(0x0) fcntl$lock(r14, 0x7, &(0x7f0000000080)) fcntl$lock(r14, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:08 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(0x0, &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, &(0x7f0000000040)=""/70, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=0x0], 0x6) fallocate(r5, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x4000000000007, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 17:50:08 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe) getgid() sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) 17:50:08 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(0x0, &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, &(0x7f0000000040)=""/70, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=0x0], 0x6) fallocate(r5, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:08 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(0x0, &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, &(0x7f0000000040)=""/70, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=0x0], 0x6) fallocate(r5, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:08 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(0x0, &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, &(0x7f0000000040)=""/70, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=0x0], 0x6) fallocate(r5, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:09 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(0x0, &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, &(0x7f0000000040)=""/70, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=0x0], 0x6) fallocate(r5, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) [ 1079.788601] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1079.797043] FAT-fs (loop3): Filesystem has been set read-only [ 1079.803233] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:09 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x1, 0x0, 0x6, 0x1, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x803, 0xa0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x3) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) stat(0x0, &(0x7f0000000b00)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)) r6 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r7, &(0x7f0000000040)=""/70, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r8, &(0x7f0000000040)=""/70, 0x46) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[@ANYRES16=r8, @ANYRES32=0x0], 0x6) fallocate(r5, 0x100000003, 0xfb7d, 0x28120001) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)) fallocate(r9, 0x100000003, 0xfb7d, 0x28120001) r10 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r10, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) fallocate(r10, 0x100000003, 0xfb7d, 0x28120001) r11 = creat(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r11, 0x7ffffc, 0x0) write$binfmt_elf64(r11, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffffffffffcad) fallocate(r11, 0x100000003, 0xfb7d, 0x28120001) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) r12 = epoll_create1(0x0) fcntl$lock(r12, 0x7, &(0x7f0000000080)) fcntl$lock(r12, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x4}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)) 17:50:09 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe) getgid() sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_procfs(0x0, 0x0) 17:50:09 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:50:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(0x0, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000780)) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4), 0x1c) r3 = shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) shmdt(r3) getdents64(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ftruncate(r4, 0x3) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 17:50:09 executing program 5: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f00000003c0)="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", 0x300) sendfile(r1, r2, 0x0, 0x1c500) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffff) syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RLERROR(r1, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r3, @ANYRESDEC, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC, @ANYPTR, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16], @ANYRESOCT=0x0, @ANYBLOB='N', @ANYRESHEX=0x0, @ANYRESHEX], 0x77) 17:50:09 executing program 4: modify_ldt$write2(0x11, &(0x7f00000000c0)={0x401}, 0x10) modify_ldt$write2(0x11, &(0x7f00000014c0), 0x10) [ 1080.437335] audit: type=1804 audit(1582566609.945:180): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir862632197/syzkaller.ZoMOWu/842/file0/file0" dev="loop5" ino=1968 res=1 17:50:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) [ 1080.483487] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 1080.500699] FAT-fs (loop5): Filesystem has been set read-only [ 1080.509082] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970769) 17:50:10 executing program 5: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f00000003c0)="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", 0x300) sendfile(r1, r2, 0x0, 0x1c500) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffff) syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RLERROR(r1, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r3, @ANYRESDEC, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC, @ANYPTR, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16], @ANYRESOCT=0x0, @ANYBLOB='N', @ANYRESHEX=0x0, @ANYRESHEX], 0x77) 17:50:10 executing program 4: modify_ldt$write2(0x11, &(0x7f00000000c0)={0x401}, 0x10) modify_ldt$write2(0x11, &(0x7f00000014c0), 0x10) 17:50:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$char_usb(r1, &(0x7f0000000200)="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", 0xec1) [ 1080.896879] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1080.905382] FAT-fs (loop3): Filesystem has been set read-only [ 1080.911443] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semop(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x7f, 0x1, 0xffff, 0x9}) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xfec0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000005c0)="da57a325ef6edfee93ece9c67a086242f54b8fc7580622938c0417c6efe05f6fbcbf6e4e4c5ec43369188195a582bafbc1d770a7b7703ec5444dd019103c8e9f2338a14527f62a3caf89d1c7805e53797c404f545890da6b46c253c69b2c415bf185190ed5246cdf613723a5644a12fe7d49919320015d2589", 0x79) 17:50:10 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8994, &(0x7f0000000180)={'batadv0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8994, &(0x7f0000000180)={'batadv0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x1000201b}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x0, 0x0) open(0x0, 0x8060, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmmsg(r3, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x400c044) accept$alg(r0, 0x0, 0x0) [ 1081.114490] audit: type=1804 audit(1582566610.625:181): pid=32011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir862632197/syzkaller.ZoMOWu/843/file0/file0" dev="loop5" ino=1971 res=1 [ 1081.121503] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 1081.159487] FAT-fs (loop5): Filesystem has been set read-only [ 1081.166814] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970769) [ 1081.200451] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 17:50:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 1081.225819] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1081.267671] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1081.277129] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1081.295928] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1081.306259] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1081.320696] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1081.357939] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1081.399602] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1081.413851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 17:50:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) 17:50:11 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x0, 0x0, 0x0) 17:50:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:11 executing program 0: 17:50:11 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0) lchown(0x0, r3, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC]) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x3a7188a5757e0467, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffb) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="76ec44c862a3e71d370d8c33cccb8cca7cd156b0", @ANYRESDEC=0x0, @ANYBLOB="3c00483bf9d09fc936ab896c9356b5db4db4e2ac446d8d0b7b524a2f8034c2fa1691540f869dff0dc343c7f68e"]) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x10000040}, 0x0) close(0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x0) 17:50:11 executing program 4: 17:50:11 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:11 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'vlan1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 1081.802184] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1081.810801] FAT-fs (loop3): Filesystem has been set read-only [ 1081.816855] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:50:11 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8994, &(0x7f0000000180)={'batadv0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x1000201b}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x0, 0x0) open(0x0, 0x8060, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmmsg(r3, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x400c044) accept$alg(r0, 0x0, 0x0) 17:50:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:50:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:12 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) sendmmsg$alg(r4, &(0x7f0000005200)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="741c68a9452baec4817dd9ac17b6b3d9204cd3878d2e08a7dc91b3d31f27ed3d4448fc25eec42f07b9e60199229da53a0ea79b805e1b9e2eafc809effe25950d52b068b0aaad87e756e16c52ad3a7df6e49710a89ed04fbb6ebe1ea7fd40cd8c0e3e6fa25b4c42db2a03e25351aa6aa76c4459af052678c5aa8474b609e89b68c17c57fb320497528050f58bace0cff679b46dd94ae3e44f04d3f6e92f407b8e1872cfcab5447170055d7f61e7a0199871e758625f", 0xb5}, {&(0x7f0000000a00)="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", 0xf2b}], 0x2, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001b80)=""/4088, 0xff8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000080)=""/38, 0x26}], 0x3}}], 0x2, 0x0, 0x0) 17:50:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) 17:50:12 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r0 = memfd_create(0x0, 0x0) r1 = creat(&(0x7f0000000480)='./bus/file0\x00', 0x81) fallocate(r1, 0x0, 0x0, 0x2000002) read$eventfd(r1, 0x0, 0x0) fallocate(r0, 0x800000000000003, 0xfa9, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = msgget$private(0x0, 0xf86) msgctl$IPC_STAT(r3, 0x2, &(0x7f00000002c0)=""/106) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001) getpid() sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x800fe) sendfile(r5, r6, 0x0, 0x8000fffffffe) 17:50:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8994, &(0x7f0000000180)={'batadv0\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8994, &(0x7f0000000180)={'batadv0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x1000201b}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x0, 0x0) open(0x0, 0x8060, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmmsg(r3, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x8, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x400c044) accept$alg(r0, 0x0, 0x0) [ 1082.895117] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1082.903527] FAT-fs (loop3): Filesystem has been set read-only [ 1082.910655] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000080)={0x28}, 0x28) socket(0x100000000011, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xfec0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) 17:50:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8994, &(0x7f0000000180)={'batadv0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x1000201b}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x0, 0x0) open(0x0, 0x8060, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmmsg(r3, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x400c044) accept$alg(r0, 0x0, 0x0) 17:50:12 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:12 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:50:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r0, 0xc0045878) [ 1084.239544] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1084.248193] FAT-fs (loop3): Filesystem has been set read-only [ 1084.254270] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:13 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:13 executing program 0: prlimit64(0x0, 0x9, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1ff, &(0x7f00000004c0)) 17:50:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x0, 0x0) open(0x0, 0x8060, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmmsg(r1, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x400c044) accept$alg(r0, 0x0, 0x0) 17:50:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 17:50:14 executing program 0: prlimit64(0x0, 0x9, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1ff, &(0x7f00000004c0)) 17:50:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28}, 0x28) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semctl$GETPID(0x0, 0x0, 0xb, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfec0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000005c0)="da57a325ef6edfee93ece9c67a086242f54b8fc7580622938c0417c6efe05f6fbcbf6e4e4c5ec43369188195a582bafbc1d770a7b7703ec5444dd019103c8e9f2338a14527f62a3caf89d1c7805e53797c404f545890da6b46c253c69b2c415bf185190ed5246cdf613723a5644a12fe7d49919320015d2589f970b46bd63c72d7d4e8a4552e061a8f0fabee4b61600d322868b5dc1bc5124287892c0db383e641a246c9c231c66b200f72eb8588785a2c28", 0xb2) 17:50:14 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 17:50:14 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) 17:50:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = gettid() tkill(r0, 0x3c) syz_open_procfs(r0, 0x0) 17:50:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000740)=""/4096, &(0x7f0000000580)=0x1000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe2(&(0x7f0000000000), 0x0) 17:50:15 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 17:50:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000080)={0x28}, 0x28) socket(0x100000000011, 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xfec0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000004c0)) 17:50:15 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) 17:50:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) [ 1086.335645] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1086.344614] FAT-fs (loop3): Filesystem has been set read-only [ 1086.350886] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}}, 0x0) 17:50:16 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000080)={0x28}, 0x28) socket(0x100000000011, 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xfec0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000004c0)) [ 1086.646983] audit: type=1400 audit(1582566616.155:182): avc: denied { wake_alarm } for pid=32253 comm="syz-executor.1" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 17:50:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x0, 0x0) open(0x0, 0x8060, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmmsg(r1, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x400c044) accept$alg(r0, 0x0, 0x0) 17:50:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000003000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x1, 0x0, 0x14}, 0x20) tkill(r3, 0xb) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 17:50:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) sendmmsg$alg(r2, &(0x7f0000005200)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="741c68a9452baec4817dd9ac17b6b3d9204cd3878d2e08a7dc91b3d31f27ed3d4448fc25eec42f07b9e60199229da53a0ea79b805e1b9e2eafc809effe25950d52b068b0aaad87e756e16c52ad3a7df6e49710a89ed04fbb6ebe1ea7fd40cd8c0e3e6fa25b4c42db2a03e25351aa6aa76c4459af052678c5aa8474b609e89b68c17c57fb320497528050f58bace0cff679b46dd94ae3e44f04d3f6e92f407b8e1872cfcab5447170055d7f61e7a0199871e758625f5e25453ae85f88f4786aca2c94", 0xc2}, {&(0x7f0000000a00)="4c95fd86786d4d3da356f65814137d5c4479c138a32669a4d3a4d84880c9c27ef11359666aee6bb2be3980d0b5dfb028f9f8bd5fab4363e601272acc211d24e0a42b50ad863baf1fcb335a49ae3fdb512174abfcba28c592778536d60c8a420e0b9f1aca1a41536b73007391c01f6d67c011c2b4694099b80aa330cee4d7fb21b09db83c9794ff80ee170c8082fe8136d666037ae2d4d160242cabd75796abc81a3f8a72c041c98aa647003f99dfee32aaa005ee587fd081dc8f51fd150bc1af0c1e3ea9c909473120dffd5611d11fb72f0acb8e71059f784fe49e061917bf5e8e09164bfa0bf1be40e1bb47a0f016fa73f2e2449a0d360d0d00a80eb74ff143c941ff5ac8d3579fc1d6a6815306a307526f7e7495bac24683c5d1e22886977391032dbdaca2bde735cf2626efaf2a03a5ed7db76815e9b70ca8fe8e7de89cab149708c50c5c3833c7d44b6f24af28feb9b02a80ce5dc6ac5fc3bf06ae30e58ea8f7e8a03469ac2f4c201fe397ba095f77b4e54678dec2d04420172a44993fb93b489ff1bd111c2b6bddc257bc221c441ed68c7d6b9f4de6818839aa26bc0d29d256c41f1911849a6a132ad16d65e85b73c7c771c8a2ae1c37e1c4f62330ef97d17bf0c15d179e777f1c5dde0c547c20c9756ef6c2d78eb7d47b2b40313cd5020a81b53536de4af828550b17ccc39c341598f1b1b4bc8749b973e6529921400c851fd2b13a14c1a4e757e38c5dbc22e72cf8817ae9e1452669761b17f2596422693a10980c06a21aa8e324f627636ef7fc867c59f5dd180c50f2905bbcd62795ced1810a621ff2e8fbd28152334e37dd0cc4ff53111413b5607b5c6a9b79fb7494b637a2ee1c9a6902551cd41a2b8d2a0769308cc79e0d80d32568a0ad5a38fb72d01b5035e4918009c5f0cd0af5c139b1f8a74a3420f71e5396aae474e003c16f6f8412b81abe1819dcd2e8e9010e2f9d7d537e48dea3fb20a0e9375baf73f3fb8d91e1b21c0d211cab7285159098b0a894305a01f6cfa81bafeb42b608752cbe82b1068ac2587dcfe0fbad3eb372ac680efb980a083f6f24d32c62ad778cb6739f0ab2f27d462e90b9b280328754ebac8b0e2b310b959d333955f9981e6c2f066ba24a833112650666cc2de91110932d35c9819eac7ff1ff47e93e0de7c2fd0012d27764e79b59ee0c39314cd3d09b88b1151c17992dffe9a3e039a22591001f0c1fc82669b4d48c06fdaf703e804de4132bcc5cb0621e2fd338455bb29f1e2d3527dd2f85864250fa4b574fd85ddde8ef8883661f9b9e2908536db5a6a1d5d1b9beb4a76d53bef29e06ce949ddfbc729aef52707ec71ddcd9e38018cf8fb626861e88e7f40df01c408481f2650eeba8e1d40ac074ec524134d5b71e5549d3f84885ed6b1e223a86de07a764d34c94034aff1da5d8a9d906088b216a4bdc44032d2d14a98ea3a9834fa499c795d3ff7d3b10d355a0997e0f55b0d6b0221f25679c4c6b42cf8215ba9117624d153f36a57461652212e8e7e031a7fe69bf131a15e36aff60e8a4a7470a5eb601a91bd795f1c38633ec3055cdd45fd2528cdf56ba5b635030d83e1557cd303ef5c50cbef9a08608a96b901e4aa81eef08d561ea87f4ab38d3feca0b0154ca60a8c9a99ba5a98e1cba4891d734e056082d766e2caf6afaeaa358079771aa5a87bced83ae9ad00dcfc8ba23b43a4f08a2478f127473a93cdd6e0ae8c973f9aefdaca5f997205712e627f574e11584e032db2a6081bbc33109ef52f5f6173101dface08efbcb9f93ba0e623c75d130c27c886894bc03875db73864f1c2b5d8f17423787a79c256ab76f24c8ac34a6d8700493b89cf8d0f1cc3ef63c2b62982dac56749d2c8b997f64e6211789dc5a6d3ce6ac342feb8577bec277a8fb8c8dcdee5b1dc6b7c28107b74079f57c97a736d0c2d8e608f76a0a3b603791ac10e8054915aa6778be2c986945bc676724eadc6c95c61f4122a9beb0a3abcd1968517d5070118698f1f507649e452f0ca52eb92d7476bc7a9ae7720f20356a27fe36d11a2dbfe11f6dec4861184d157f13a52e3fdac4deda3baba9934397d8fafba37ff78e0c8dcf6879e76988ed129179dac3e09b04bc426cc4834426bad37c4dc61dc2f0a39084971434798288af11ffe6a9fb7864db55fb589543a2762212f13d7ff561967250756f2d9cd35ff82cd9c99580a44b32fa1ffe1de936a003da603ceee7965582632b0611adc37dcb503eafe39f91bb11cca103e85626d844cfe7bcc4d37a1b6574549b77520c4d15495c053fe48308d216ea956252403aa48da191f0d34a2018dddca8773f8579df72a17be5605b379cbde282f34c863dedb3103660f14de9c979a878c000e1c23a4b1c72c163fc615337e72894fd63288f937d4b1a1938163425d9b71fd54de34ab6f544240632eba54cc514115b7eac2e6afbe6b90d9c2b90ce74340c3439fca9cda57d827074e42b263eb32d64a9759dc2b6b670ce7d259e769d05b64ef8afd846ca532690aa67866b8b46b2eebf0302162ca59f15ba40afb5030c2591df54a165b7f1b7946e52cdb98b192d048d81dc9f5c64a9604b03d4a50f812c70588dfe2522be300caa4c6d9e1f5e26b092f2dd2cc34ebdee6d9a9ace86aa3f893c4aaf91d2f3e48d6a036735acca66fad84b5930a6eb2c821c1ab07e3c455cc18718e6e9347a01f56702bd01bede74b625c195321acf284bd4e854185761f7d97dadc7ba0d7d63479d7209a50f102782889acdb6c8da611c71b31915c8eeefe57768a5174ab41becf21e1f2b9fd3f2701cdf9f6baefa9d39a09a6463795d7d5707d6034345c8534ed3bb7cb36822f4afdff716021f22de02820b7d1d2b4627cba9c88232f17fd3f53529a0395e0f14e68462c7d67dab6d44408b76f447c3b7db2bc48225cb5ae569ea991adb60ac9f6939a84fad0937e945a0ec2236237272b5e1a013567a205534750746417982d5533b2c0a4beb307120b04ad0f4a253d7a9494204cd137d4a364348f096172bedd20f5e6d90cf52e95623dc63dca4da674a4ad06832fa3c6bc0cd4f04c07c4a2e93719ae347161361a85ae965e807d07c3823e111c3e20e6ec9f6f6b5051c4fb81ea1b26daf76c250ed6302f65e30767233df9de419cbf8cee42553c9f3bb2b4130202be646a93b87660d0afbfbd4170387e9fc5230d7846af8714d5856f66caa0394f5892379b6b991389d35153c2833e6720a422284e086ca63e5335445b0439ae4396c0f7e1b891c1b695f79e07de452c9df19bd1aa1b1a03ff5d84c08592f26774a2f7e1c845871957b579f0f6cd0d965d365f52a9ba85e29cc1260f950e72c3b7f62da1cfaeec26a038de3473fc1cdf31372d49f01d11b9846a65c3b653286ac4b683172a292f476e30e03924ccdbd36b0b4159276e747b8e195fee5c1eef4cc277fc4a7a3acb6c491f4045198ca87117fb0160556201be4b88785362e811f3b011dd512afeccc5491b53baf4bd8e469514440936b5fbae0ca48a328a7615a7f38de9af4e87adb0ed5c2064907fcc85907051ac0bb20fe68ca0caada48cd29498f3e7d0fffd04fe0d555bfb8fe3617a15caf9690dd0e57133242343563bacc713fb10b0ce60cf87d8d0afc4335a5caf38950a6b399f88b3a3a94ff4de2ee0132693ab8b7b7db524a946941a985b036fc8a9d75366fd33c2d023ecfb2041ca0d07be58517f89e3a6996e93da7111c90f4bda26449e0f023fc0a4cdbf26c165620bae9e0800c5621a71f3afe2fe3306e4b3e71238c580c7d8d91be6ea031a5f765765dcd5d7bcc9833db27c9616887c094ef8de9e4fcd811ce0ad36d8726ebf5b32bbbab568686e056c5ad39e91dc7da513fde21425cd630155527dc578d2dd842d6f213937cb1839754a6ed7d9fe1bc2ae76bd8c760a9481a13a63e40779b7e533c5e2b3e32538be7dea2048b5680f11a5b43107b7ec9d73695da71ff611ce7ca1f0c2668e1ba616a199082baa7979a6a65597cf3cbda225c4780b6278475d5e6e9dff9e24b0ff58636366916416ad7fd94aa024d12a05cafa2fb5fae4389452c85ae173bf0010bd952276af7f5ea8ebb12ae6a659ec3022facfb3efdfabc00ca50bd207fd30d0b8d5b743d49d6cee0254a78048231ac86177f5b43574f09b7b87aac8db7e4c9a1e8e520cddb810b1bdacb6b786905d9e664464c112a5884b34007b99ad4c3cf42254bee2a9d58f4ef0926005abd27a21f270d11e89f1b947415b96140d3d5414d231358ca19253a548906fc849a8ac46a652d438cbf5c84bde39abc137c74276dda0e17f7d71afebcee135263816e4e48346f53e8331c65bbf2382065b0583b1e68fbd179cdd85576391e6f9f81c89cab2ba2bcc93a1bf216c338f04e657ea6d9081e4dc9be245cceecfc04a0a5133968cf92e100a1e37aa4672c01aa022d628121f552a44de45b3a91cc1c4ee43a47244e1b966cdeb2c26bce7c1dbb506297408f2a993e74a3b5bf9a1b0770ca785e4746125ac21037d8014950033fbc6d83f72a80c0f4c90776063245ffe2ed8b10f6a427b4e2d1e831db87b0508370f740338d4d83e33236e97970e26bf38bc4f7bb4c6227d096a3bf15a9f31680570349492e61fb41cbdf89efa296ecfd98e042dedee172090bcf2cafdae6c449f05712f8458cf6b4f5372d199d618491005495e568bd7baf2ec300b1e899bea8ea084ea50de1994cf60ae6b6ebd06972b28698507390c828f6fba0985d2b21f31c434c23ffc2802a592bd82d0e3f11b7bf0ec6b0fcbe5c9e415992a00b3b2742d3089f114761a76c5722d4950faa4c7d28cbf49926fc7752155acc25599df27520ae9ba13ddeae4114764d2cc117f911772a94e3881fd0c0c2ea799c996a14f9cbca7de47d7c8b61037b1fd5a5e36250526cca239a15d06f48524c928be05d2bd2fe86ea58cb82ace8cc76ecfe362ab61233f96fd0788c71edee47b3da3e12ebc698d07506c09f71b76583d46011f7a8b2039960c889b54290d587326a5f1494d262823bc3ffbf4d8a16daf76b465f2d4fca3d774e81ae110d79fa6d21570c5964cf96bb3156e8190813a219d7e8f46bd08c1775b22fca28589a7f0c705d113d5803d3bb63cc6ae15e3140399f49afcc8dd0bda151435f4f86ddd9cbc7ba429e3be66ca0cf14a623a9400680b35daea8a12140c3809b59da78ccded6cd30100cd553ea6d84f866352a7ad10543b93d844dcd59c753eaa7e86d169d0065b1665e901e039d01d5e99ef51fa95698ae0aca0d05333d775e7d2d448e2f7701a79d647db4edec28fcba2e53a38cee6e982f41561a12c505ef38616fab2835590be17b28a974888a79b6f115939dd1cee1bedd5424d016975182afa99f66dd346351b416460ab3e1898e7e5a06dbc9786a31f21ff359265378e28135bbf262b7cbc9d024900dcac4c274d047e6f37b5f8d4a882e5c8ae32d59377eccb7394c0cfe695b7f29d545e7bd7", 0xf2e}], 0x2, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003200)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) [ 1086.750966] nla_parse: 203 callbacks suppressed [ 1086.750971] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1086.807206] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1086.834228] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1086.853710] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1086.965073] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 17:50:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) sendmmsg$alg(r2, &(0x7f0000005200)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="741c68a9452baec4817dd9ac17b6b3d9204cd3878d2e08a7dc91b3d31f27ed3d4448fc25eec42f07b9e60199229da53a0ea79b805e1b9e2eafc809effe25950d52b068b0aaad87e756e16c52ad3a7df6e49710a89ed04fbb6ebe1ea7fd40cd8c0e3e6fa25b4c42db2a03e25351aa6aa76c4459af052678c5aa8474b609e89b68c17c57fb320497528050f58bace0cff679b46dd94ae3e44f04d3f6e92f407b8e1872cfcab5447170055d7f61e7a0199871e758625f5e25453ae85f88f4786aca2c94", 0xc2}, {&(0x7f0000000a00)="4c95fd86786d4d3da356f65814137d5c4479c138a32669a4d3a4d84880c9c27ef11359666aee6bb2be3980d0b5dfb028f9f8bd5fab4363e601272acc211d24e0a42b50ad863baf1fcb335a49ae3fdb512174abfcba28c592778536d60c8a420e0b9f1aca1a41536b73007391c01f6d67c011c2b4694099b80aa330cee4d7fb21b09db83c9794ff80ee170c8082fe8136d666037ae2d4d160242cabd75796abc81a3f8a72c041c98aa647003f99dfee32aaa005ee587fd081dc8f51fd150bc1af0c1e3ea9c909473120dffd5611d11fb72f0acb8e71059f784fe49e061917bf5e8e09164bfa0bf1be40e1bb47a0f016fa73f2e2449a0d360d0d00a80eb74ff143c941ff5ac8d3579fc1d6a6815306a307526f7e7495bac24683c5d1e22886977391032dbdaca2bde735cf2626efaf2a03a5ed7db76815e9b70ca8fe8e7de89cab149708c50c5c3833c7d44b6f24af28feb9b02a80ce5dc6ac5fc3bf06ae30e58ea8f7e8a03469ac2f4c201fe397ba095f77b4e54678dec2d04420172a44993fb93b489ff1bd111c2b6bddc257bc221c441ed68c7d6b9f4de6818839aa26bc0d29d256c41f1911849a6a132ad16d65e85b73c7c771c8a2ae1c37e1c4f62330ef97d17bf0c15d179e777f1c5dde0c547c20c9756ef6c2d78eb7d47b2b40313cd5020a81b53536de4af828550b17ccc39c341598f1b1b4bc8749b973e6529921400c851fd2b13a14c1a4e757e38c5dbc22e72cf8817ae9e1452669761b17f2596422693a10980c06a21aa8e324f627636ef7fc867c59f5dd180c50f2905bbcd62795ced1810a621ff2e8fbd28152334e37dd0cc4ff53111413b5607b5c6a9b79fb7494b637a2ee1c9a6902551cd41a2b8d2a0769308cc79e0d80d32568a0ad5a38fb72d01b5035e4918009c5f0cd0af5c139b1f8a74a3420f71e5396aae474e003c16f6f8412b81abe1819dcd2e8e9010e2f9d7d537e48dea3fb20a0e9375baf73f3fb8d91e1b21c0d211cab7285159098b0a894305a01f6cfa81bafeb42b608752cbe82b1068ac2587dcfe0fbad3eb372ac680efb980a083f6f24d32c62ad778cb6739f0ab2f27d462e90b9b280328754ebac8b0e2b310b959d333955f9981e6c2f066ba24a833112650666cc2de91110932d35c9819eac7ff1ff47e93e0de7c2fd0012d27764e79b59ee0c39314cd3d09b88b1151c17992dffe9a3e039a22591001f0c1fc82669b4d48c06fdaf703e804de4132bcc5cb0621e2fd338455bb29f1e2d3527dd2f85864250fa4b574fd85ddde8ef8883661f9b9e2908536db5a6a1d5d1b9beb4a76d53bef29e06ce949ddfbc729aef52707ec71ddcd9e38018cf8fb626861e88e7f40df01c408481f2650eeba8e1d40ac074ec524134d5b71e5549d3f84885ed6b1e223a86de07a764d34c94034aff1da5d8a9d906088b216a4bdc44032d2d14a98ea3a9834fa499c795d3ff7d3b10d355a0997e0f55b0d6b0221f25679c4c6b42cf8215ba9117624d153f36a57461652212e8e7e031a7fe69bf131a15e36aff60e8a4a7470a5eb601a91bd795f1c38633ec3055cdd45fd2528cdf56ba5b635030d83e1557cd303ef5c50cbef9a08608a96b901e4aa81eef08d561ea87f4ab38d3feca0b0154ca60a8c9a99ba5a98e1cba4891d734e056082d766e2caf6afaeaa358079771aa5a87bced83ae9ad00dcfc8ba23b43a4f08a2478f127473a93cdd6e0ae8c973f9aefdaca5f997205712e627f574e11584e032db2a6081bbc33109ef52f5f6173101dface08efbcb9f93ba0e623c75d130c27c886894bc03875db73864f1c2b5d8f17423787a79c256ab76f24c8ac34a6d8700493b89cf8d0f1cc3ef63c2b62982dac56749d2c8b997f64e6211789dc5a6d3ce6ac342feb8577bec277a8fb8c8dcdee5b1dc6b7c28107b74079f57c97a736d0c2d8e608f76a0a3b603791ac10e8054915aa6778be2c986945bc676724eadc6c95c61f4122a9beb0a3abcd1968517d5070118698f1f507649e452f0ca52eb92d7476bc7a9ae7720f20356a27fe36d11a2dbfe11f6dec4861184d157f13a52e3fdac4deda3baba9934397d8fafba37ff78e0c8dcf6879e76988ed129179dac3e09b04bc426cc4834426bad37c4dc61dc2f0a39084971434798288af11ffe6a9fb7864db55fb589543a2762212f13d7ff561967250756f2d9cd35ff82cd9c99580a44b32fa1ffe1de936a003da603ceee7965582632b0611adc37dcb503eafe39f91bb11cca103e85626d844cfe7bcc4d37a1b6574549b77520c4d15495c053fe48308d216ea956252403aa48da191f0d34a2018dddca8773f8579df72a17be5605b379cbde282f34c863dedb3103660f14de9c979a878c000e1c23a4b1c72c163fc615337e72894fd63288f937d4b1a1938163425d9b71fd54de34ab6f544240632eba54cc514115b7eac2e6afbe6b90d9c2b90ce74340c3439fca9cda57d827074e42b263eb32d64a9759dc2b6b670ce7d259e769d05b64ef8afd846ca532690aa67866b8b46b2eebf0302162ca59f15ba40afb5030c2591df54a165b7f1b7946e52cdb98b192d048d81dc9f5c64a9604b03d4a50f812c70588dfe2522be300caa4c6d9e1f5e26b092f2dd2cc34ebdee6d9a9ace86aa3f893c4aaf91d2f3e48d6a036735acca66fad84b5930a6eb2c821c1ab07e3c455cc18718e6e9347a01f56702bd01bede74b625c195321acf284bd4e854185761f7d97dadc7ba0d7d63479d7209a50f102782889acdb6c8da611c71b31915c8eeefe57768a5174ab41becf21e1f2b9fd3f2701cdf9f6baefa9d39a09a6463795d7d5707d6034345c8534ed3bb7cb36822f4afdff716021f22de02820b7d1d2b4627cba9c88232f17fd3f53529a0395e0f14e68462c7d67dab6d44408b76f447c3b7db2bc48225cb5ae569ea991adb60ac9f6939a84fad0937e945a0ec2236237272b5e1a013567a205534750746417982d5533b2c0a4beb307120b04ad0f4a253d7a9494204cd137d4a364348f096172bedd20f5e6d90cf52e95623dc63dca4da674a4ad06832fa3c6bc0cd4f04c07c4a2e93719ae347161361a85ae965e807d07c3823e111c3e20e6ec9f6f6b5051c4fb81ea1b26daf76c250ed6302f65e30767233df9de419cbf8cee42553c9f3bb2b4130202be646a93b87660d0afbfbd4170387e9fc5230d7846af8714d5856f66caa0394f5892379b6b991389d35153c2833e6720a422284e086ca63e5335445b0439ae4396c0f7e1b891c1b695f79e07de452c9df19bd1aa1b1a03ff5d84c08592f26774a2f7e1c845871957b579f0f6cd0d965d365f52a9ba85e29cc1260f950e72c3b7f62da1cfaeec26a038de3473fc1cdf31372d49f01d11b9846a65c3b653286ac4b683172a292f476e30e03924ccdbd36b0b4159276e747b8e195fee5c1eef4cc277fc4a7a3acb6c491f4045198ca87117fb0160556201be4b88785362e811f3b011dd512afeccc5491b53baf4bd8e469514440936b5fbae0ca48a328a7615a7f38de9af4e87adb0ed5c2064907fcc85907051ac0bb20fe68ca0caada48cd29498f3e7d0fffd04fe0d555bfb8fe3617a15caf9690dd0e57133242343563bacc713fb10b0ce60cf87d8d0afc4335a5caf38950a6b399f88b3a3a94ff4de2ee0132693ab8b7b7db524a946941a985b036fc8a9d75366fd33c2d023ecfb2041ca0d07be58517f89e3a6996e93da7111c90f4bda26449e0f023fc0a4cdbf26c165620bae9e0800c5621a71f3afe2fe3306e4b3e71238c580c7d8d91be6ea031a5f765765dcd5d7bcc9833db27c9616887c094ef8de9e4fcd811ce0ad36d8726ebf5b32bbbab568686e056c5ad39e91dc7da513fde21425cd630155527dc578d2dd842d6f213937cb1839754a6ed7d9fe1bc2ae76bd8c760a9481a13a63e40779b7e533c5e2b3e32538be7dea2048b5680f11a5b43107b7ec9d73695da71ff611ce7ca1f0c2668e1ba616a199082baa7979a6a65597cf3cbda225c4780b6278475d5e6e9dff9e24b0ff58636366916416ad7fd94aa024d12a05cafa2fb5fae4389452c85ae173bf0010bd952276af7f5ea8ebb12ae6a659ec3022facfb3efdfabc00ca50bd207fd30d0b8d5b743d49d6cee0254a78048231ac86177f5b43574f09b7b87aac8db7e4c9a1e8e520cddb810b1bdacb6b786905d9e664464c112a5884b34007b99ad4c3cf42254bee2a9d58f4ef0926005abd27a21f270d11e89f1b947415b96140d3d5414d231358ca19253a548906fc849a8ac46a652d438cbf5c84bde39abc137c74276dda0e17f7d71afebcee135263816e4e48346f53e8331c65bbf2382065b0583b1e68fbd179cdd85576391e6f9f81c89cab2ba2bcc93a1bf216c338f04e657ea6d9081e4dc9be245cceecfc04a0a5133968cf92e100a1e37aa4672c01aa022d628121f552a44de45b3a91cc1c4ee43a47244e1b966cdeb2c26bce7c1dbb506297408f2a993e74a3b5bf9a1b0770ca785e4746125ac21037d8014950033fbc6d83f72a80c0f4c90776063245ffe2ed8b10f6a427b4e2d1e831db87b0508370f740338d4d83e33236e97970e26bf38bc4f7bb4c6227d096a3bf15a9f31680570349492e61fb41cbdf89efa296ecfd98e042dedee172090bcf2cafdae6c449f05712f8458cf6b4f5372d199d618491005495e568bd7baf2ec300b1e899bea8ea084ea50de1994cf60ae6b6ebd06972b28698507390c828f6fba0985d2b21f31c434c23ffc2802a592bd82d0e3f11b7bf0ec6b0fcbe5c9e415992a00b3b2742d3089f114761a76c5722d4950faa4c7d28cbf49926fc7752155acc25599df27520ae9ba13ddeae4114764d2cc117f911772a94e3881fd0c0c2ea799c996a14f9cbca7de47d7c8b61037b1fd5a5e36250526cca239a15d06f48524c928be05d2bd2fe86ea58cb82ace8cc76ecfe362ab61233f96fd0788c71edee47b3da3e12ebc698d07506c09f71b76583d46011f7a8b2039960c889b54290d587326a5f1494d262823bc3ffbf4d8a16daf76b465f2d4fca3d774e81ae110d79fa6d21570c5964cf96bb3156e8190813a219d7e8f46bd08c1775b22fca28589a7f0c705d113d5803d3bb63cc6ae15e3140399f49afcc8dd0bda151435f4f86ddd9cbc7ba429e3be66ca0cf14a623a9400680b35daea8a12140c3809b59da78ccded6cd30100cd553ea6d84f866352a7ad10543b93d844dcd59c753eaa7e86d169d0065b1665e901e039d01d5e99ef51fa95698ae0aca0d05333d775e7d2d448e2f7701a79d647db4edec28fcba2e53a38cee6e982f41561a12c505ef38616fab2835590be17b28a974888a79b6f115939dd1cee1bedd5424d016975182afa99f66dd346351b416460ab3e1898e7e5a06dbc9786a31f21ff359265378e28135bbf262b7cbc9d024900dcac4c274d047e6f37b5f8d4a882e5c8ae32d59377eccb7394c0cfe695b7f29d545e7bd7", 0xf2e}], 0x2, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003200)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) 17:50:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) [ 1087.074288] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.096542] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 17:50:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$peeksig(0x4, r0, 0x0, 0x0) [ 1087.116460] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 17:50:16 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x161080) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x2, 0x6, 0x3569, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x3) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x7ff, 0x0, 0x0, 0xffc0000000000000, 0x1ff}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r3, r3, &(0x7f0000000200), 0xa198) openat$full(0xffffffffffffff9c, 0x0, 0x8800, 0x0) [ 1087.193198] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.225308] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 17:50:16 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 1087.350000] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1087.358699] FAT-fs (loop3): Filesystem has been set read-only [ 1087.364911] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:17 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:17 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:17 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:50:19 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:19 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:19 executing program 0: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000680)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x9, 0x1, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x9, 0x80}]}, 0x10) socket(0x10, 0x800000000000803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:50:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:50:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140), 0x0) r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 17:50:19 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r2) sendfile(r1, r0, 0x0, 0x209) 17:50:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0xc) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) r2 = socket(0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 17:50:19 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000780)="7f", 0x1}], 0x1) [ 1089.876055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1089.884456] FAT-fs (loop3): Filesystem has been set read-only [ 1089.890632] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:19 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:19 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r2) sendfile(r1, r0, 0x0, 0x209) 17:50:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 17:50:19 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r2) sendfile(r1, r0, 0x0, 0x209) [ 1090.291867] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:50:19 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = open(0x0, 0x8060, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x400c044) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8994, &(0x7f0000000180)={'batadv0\x00'}) execve(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000480)=[&(0x7f0000000300)='batadv0\x00', &(0x7f00000003c0)='batadv0\x00', &(0x7f0000000400)='eth0self:trustedmime_typetrusted\x00', &(0x7f0000000440)='!\x00']) accept$alg(0xffffffffffffffff, 0x0, 0x0) 17:50:19 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) [ 1090.385285] syz-executor.0 (32380) used greatest stack depth: 21680 bytes left 17:50:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:50:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 17:50:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0xc) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) r2 = socket(0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 17:50:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) [ 1090.824709] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1090.833217] FAT-fs (loop3): Filesystem has been set read-only [ 1090.839219] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 17:50:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:20 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = open(0x0, 0x8060, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x400c044) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8994, &(0x7f0000000180)={'batadv0\x00'}) execve(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000480)=[&(0x7f0000000300)='batadv0\x00', &(0x7f00000003c0)='batadv0\x00', &(0x7f0000000400)='eth0self:trustedmime_typetrusted\x00', &(0x7f0000000440)='!\x00']) accept$alg(0xffffffffffffffff, 0x0, 0x0) 17:50:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x209) 17:50:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180), 0x0) 17:50:21 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x209) 17:50:21 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x209) 17:50:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0xc) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) r2 = socket(0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 17:50:21 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) 17:50:21 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x209) 17:50:21 executing program 0: clone(0x1080210b1065ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x2102005ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = gettid() clock_adjtime(0x0, 0x0) tkill(r0, 0x1000000000016) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x4000003102041ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) [ 1091.714282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1091.723191] FAT-fs (loop3): Filesystem has been set read-only [ 1091.729184] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 970771) 17:50:21 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) 17:50:21 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x209) 17:50:21 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) 17:50:21 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) r1 = socket(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:21 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x209) 17:50:21 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:21 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket(0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$SEG6(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 17:50:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket(0x100000000011, 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semop(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfec0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000004c0)) 17:50:22 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) r1 = socket(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x20, 0x7, 0x4, 0x5, 0x7, "19c2d6af96d55ac9"}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'bridge_slave_1\x00'}) 17:50:22 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:22 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:22 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:22 executing program 1: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x13) [ 1093.007554] bridge0: port 2(bridge_slave_1) entered disabled state 17:50:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000e9ff00ff02000000000000000000000000002105000500000000000a000000000000000000000000bf6e52c100fff2ac141400000000000000000005000600000000000a00d98a00000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:50:22 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket(0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$SEG6(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 17:50:22 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/92) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x1, 0x13d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:50:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1}, 0x20) tkill(r1, 0xb) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) wait4(0x0, 0x0, 0x0, 0x0) 17:50:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:23 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:23 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000e9ff00ff02000000000000000000000000002105000500000000000a000000000000000000000000bf6e52c100fff2ac141400000000000000000005000600000000000a00d98a00000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:50:23 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:23 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:23 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:23 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket(0x0, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(&(0x7f0000000300)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$SEG6(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 17:50:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x101000000000016) listen(r1, 0x86) 17:50:25 executing program 0: 17:50:25 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:25 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:25 executing program 3: 17:50:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/92) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x1, 0x13d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:50:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x101000000000016) listen(r1, 0x86) 17:50:25 executing program 3: 17:50:26 executing program 0: 17:50:26 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xa) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) r6 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4f0a, 0x0) 17:50:26 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:26 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000008940)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000008980)) 17:50:26 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x101000000000016) listen(r1, 0x86) 17:50:26 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(0x0, 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) [ 1096.664918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=32640 comm=syz-executor.3 17:50:26 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 1096.712876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=32640 comm=syz-executor.3 [ 1096.749905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=32640 comm=syz-executor.3 [ 1096.770588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=32640 comm=syz-executor.3 [ 1096.822512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=32640 comm=syz-executor.3 17:50:29 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/92) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x1, 0x13d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:50:29 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(0x0, 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:29 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:29 executing program 0: 17:50:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x101000000000016) listen(r1, 0x86) 17:50:29 executing program 3: 17:50:29 executing program 0: 17:50:29 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(0x0, 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:29 executing program 3: 17:50:29 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:29 executing program 3: 17:50:29 executing program 0: 17:50:32 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/92) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x1, 0x13d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:50:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) listen(r1, 0x86) 17:50:32 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:32 executing program 3: 17:50:32 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:32 executing program 0: 17:50:32 executing program 3: 17:50:32 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:32 executing program 0: 17:50:32 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:32 executing program 3: 17:50:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000044000)) listen(r1, 0x86) 17:50:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b72, &(0x7f0000000040)) 17:50:35 executing program 0: 17:50:35 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:35 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:35 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000600)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x101800, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000040)=0x101, 0x33c) 17:50:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x86) 17:50:35 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/135, 0x75}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 17:50:35 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:35 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:35 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000055aa45", 0x41, 0x1c0}]) 17:50:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x86) 17:50:35 executing program 0: r0 = socket$inet(0x10, 0x10000000003, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="24000000f50307041dfffdd46fa2930020200a0009ec0300001d8568d9e264a3744632fe", 0x24}], 0x1}, 0x0) 17:50:35 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:35 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x6, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1106.027523] Dev loop1: unable to read RDB block 1 [ 1106.040751] loop1: unable to read partition table [ 1106.054710] loop1: partition table beyond EOD, truncated 17:50:35 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, &(0x7f0000000200)) listen(r1, 0x86) 17:50:35 executing program 3: r0 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000100), 0x0}, 0x20) [ 1106.077415] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 17:50:35 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:35 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) [ 1106.251644] Dev loop1: unable to read RDB block 1 [ 1106.261306] loop1: unable to read partition table [ 1106.278638] loop1: partition table beyond EOD, truncated [ 1106.295211] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 17:50:35 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) listen(r1, 0x86) 17:50:35 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:35 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="0200ee7e00ff01000000ff070000004c0000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000055aa45", 0x41, 0x1c0}]) 17:50:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) [ 1106.559758] Dev loop1: unable to read RDB block 1 [ 1106.572868] loop1: unable to read partition table 17:50:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() listen(r1, 0x86) [ 1106.603350] loop1: partition table beyond EOD, truncated [ 1106.614681] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 17:50:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:36 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5050600000047b071") getdents64(r0, 0x0, 0x800000000000000) 17:50:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x86) 17:50:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:36 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:36 executing program 1: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) fanotify_init(0x10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5543b44b00cbc63a4b14c037e4d60889e7a4e25df465cea3acfa42e37196650028258d358b512c74add39bd41100a552e54417942c7019e63cbea8f9eb07fe76e96526753a93646c3b697e3ad87a4b6ec8c3ccaf260f9f133e9e6147b2eb78321e14fb1d27374b8484d50cc77b6c67991ea3e7670000000000000000000015abf09fa83f8110abe2d5a7878ffae8f38746b7ce923651e2021ddb62577c794fa9b2d2c0c43957851cc29472084f3c547680c49633547db77fa7676feb757e2662445f293e984196c7cbd43fc56bcf10a71214a8b14ac0bec7f2"], 0x48}}, 0x0) r1 = getpid() tkill(r1, 0x9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) 17:50:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) listen(r0, 0x86) 17:50:36 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) [ 1107.383844] nla_parse: 120 callbacks suppressed [ 1107.383863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1107.507426] device gretap0 entered promiscuous mode [ 1107.515522] device macvlan3 entered promiscuous mode [ 1107.535684] device gretap0 left promiscuous mode [ 1107.639280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1107.655655] device gretap0 entered promiscuous mode [ 1107.661907] device macvlan3 entered promiscuous mode [ 1107.668567] device gretap0 left promiscuous mode 17:50:37 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) listen(r0, 0x86) 17:50:37 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) 17:50:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:37 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:37 executing program 1: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) fanotify_init(0x10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5543b44b00cbc63a4b14c037e4d60889e7a4e25df465cea3acfa42e37196650028258d358b512c74add39bd41100a552e54417942c7019e63cbea8f9eb07fe76e96526753a93646c3b697e3ad87a4b6ec8c3ccaf260f9f133e9e6147b2eb78321e14fb1d27374b8484d50cc77b6c67991ea3e7670000000000000000000015abf09fa83f8110abe2d5a7878ffae8f38746b7ce923651e2021ddb62577c794fa9b2d2c0c43957851cc29472084f3c547680c49633547db77fa7676feb757e2662445f293e984196c7cbd43fc56bcf10a71214a8b14ac0bec7f2"], 0x48}}, 0x0) r1 = getpid() tkill(r1, 0x9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) 17:50:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:37 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) [ 1108.056597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:37 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x209) [ 1108.194502] device gretap0 entered promiscuous mode 17:50:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x86) [ 1108.210720] device macvlan3 entered promiscuous mode [ 1108.331343] device gretap0 left promiscuous mode 17:50:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:38 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x86) 17:50:38 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x209) 17:50:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:38 executing program 1: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) fanotify_init(0x10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5543b44b00cbc63a4b14c037e4d60889e7a4e25df465cea3acfa42e37196650028258d358b512c74add39bd41100a552e54417942c7019e63cbea8f9eb07fe76e96526753a93646c3b697e3ad87a4b6ec8c3ccaf260f9f133e9e6147b2eb78321e14fb1d27374b8484d50cc77b6c67991ea3e7670000000000000000000015abf09fa83f8110abe2d5a7878ffae8f38746b7ce923651e2021ddb62577c794fa9b2d2c0c43957851cc29472084f3c547680c49633547db77fa7676feb757e2662445f293e984196c7cbd43fc56bcf10a71214a8b14ac0bec7f2"], 0x48}}, 0x0) r1 = getpid() tkill(r1, 0x9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) 17:50:38 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:38 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x209) [ 1108.968671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x86) [ 1109.121358] device gretap0 entered promiscuous mode [ 1109.138189] device macvlan3 entered promiscuous mode 17:50:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) listen(r0, 0x0) listen(r0, 0x86) [ 1109.160044] device gretap0 left promiscuous mode 17:50:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:38 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x209) 17:50:39 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:39 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x209) 17:50:39 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) listen(r0, 0x0) listen(r0, 0x86) 17:50:39 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:39 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x209) [ 1109.897386] audit: type=1800 audit(1582566639.405:183): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17994 res=0 17:50:39 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) listen(r0, 0x0) listen(r0, 0x86) [ 1109.970748] audit: type=1800 audit(1582566639.465:184): pid=517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17994 res=0 17:50:39 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x209) [ 1110.085654] audit: type=1800 audit(1582566639.575:185): pid=524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17992 res=0 17:50:39 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x86) 17:50:39 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1110.216871] audit: type=1800 audit(1582566639.725:186): pid=534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17988 res=0 [ 1110.393198] audit: type=1800 audit(1582566639.905:187): pid=545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17992 res=0 17:50:40 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:40 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x209) 17:50:40 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x86) 17:50:40 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:40 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:40 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x86) [ 1110.861818] audit: type=1800 audit(1582566640.375:188): pid=558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18013 res=0 17:50:40 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:40 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x209) 17:50:40 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:40 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) [ 1111.048760] audit: type=1800 audit(1582566640.555:189): pid=572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18014 res=0 [ 1111.142703] audit: type=1800 audit(1582566640.635:190): pid=580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16699 res=0 17:50:41 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:41 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x209) 17:50:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:41 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:41 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:41 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:41 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) 17:50:41 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) [ 1111.835259] audit: type=1800 audit(1582566641.345:191): pid=595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18026 res=0 17:50:41 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1111.961196] audit: type=1800 audit(1582566641.475:192): pid=605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18020 res=0 17:50:41 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) 17:50:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:42 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:42 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:42 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 17:50:42 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) 17:50:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:42 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:42 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:42 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 17:50:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:42 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xfffffff, 0xc00, 0x0, [0xff0f, 0x3800000, 0x9000000]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) 17:50:42 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 17:50:43 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000200)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 17:50:43 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:43 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 17:50:43 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:43 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:43 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 17:50:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) 17:50:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:43 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:43 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 17:50:44 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:44 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) listen(r0, 0x86) 17:50:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:44 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup2(r0, r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000200)) 17:50:44 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:44 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:44 executing program 5: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) memfd_create(0x0, 0x4) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x75a4d3b1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) geteuid() geteuid() getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48001000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="2c0100001900000229bd7000ffdbdf250280b0fffe03ff0a5105fa4608000600000000005000080033abb45d34ff7f6a58b84f1b5106d05605b1d41b5f8e30e2a890b916c726ea38670a19d7fffd0b1e66f9b47c1bb1252eae995ba77378b2cf9c2a7706dd03053930e0b188f9ef038cb016728e940008003b3681d80101043250b0a83fb7ad5e9ac9bf3f5b6c1c79dcbc7004d671f595c2c13712a110b5be7240cec6235f985bb000bfdb2d25c39c4d1b664799b3ac44b617073b5dc73f71e602d3536abec5522b7fe34e06c4d96d3d2f82ba54493b57521ed1b9576a61f63e1e0f58f08715c5a327ab85f8062922e89dfd14ffe283df7b5b4279e8574518ee8a937b", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x6}, 0x1, 0x0, 0x0, 0x1}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6, @in6=@initdev}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000500)=0xe8) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 17:50:44 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) listen(r0, 0x86) 17:50:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:44 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 1115.057957] overlayfs: filesystem on './file0' not supported as upperdir [ 1115.063683] kauditd_printk_skb: 7 callbacks suppressed [ 1115.063690] audit: type=1800 audit(1582566644.575:200): pid=751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18150 res=0 17:50:45 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:45 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) listen(r0, 0x86) 17:50:45 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = dup(r0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r1, r2, 0x0, 0x8000fffffffe) 17:50:45 executing program 5: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) memfd_create(0x0, 0x4) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x75a4d3b1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) geteuid() geteuid() getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48001000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x6}, 0x1, 0x0, 0x0, 0x1}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6, @in6=@initdev}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000500)=0xe8) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 17:50:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:45 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:45 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:45 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = dup(r0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 1115.559252] audit: type=1800 audit(1582566645.065:201): pid=765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16913 res=0 17:50:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) [ 1115.737754] audit: type=1800 audit(1582566645.245:202): pid=780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16804 res=0 17:50:45 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = dup(r0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r1, r2, 0x0, 0x8000fffffffe) 17:50:45 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) [ 1115.927429] audit: type=1800 audit(1582566645.435:203): pid=790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17128 res=0 17:50:45 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:45 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:45 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x86) 17:50:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:45 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:50:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:45 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) listen(r0, 0x86) [ 1116.401034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:45 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 1116.416101] audit: type=1800 audit(1582566645.925:204): pid=808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16883 res=0 17:50:46 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) listen(r0, 0x86) 17:50:46 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1116.563211] audit: type=1800 audit(1582566646.075:205): pid=822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17268 res=0 [ 1116.569290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1116.721180] audit: type=1800 audit(1582566646.235:206): pid=832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16726 res=0 [ 1116.726086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:46 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:46 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) listen(r0, 0x86) 17:50:46 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:46 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) 17:50:46 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) 17:50:46 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(0xffffffffffffffff, 0x86) 17:50:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:46 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:46 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) [ 1117.314896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:46 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(0xffffffffffffffff, 0x86) [ 1117.357093] audit: type=1800 audit(1582566646.865:207): pid=848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16698 res=0 [ 1117.463072] audit: type=1800 audit(1582566646.975:208): pid=863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16835 res=0 [ 1117.468573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:47 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:47 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:47 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 17:50:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:47 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(0xffffffffffffffff, 0x86) 17:50:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:47 executing program 2: r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x0) 17:50:47 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) [ 1118.195790] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:47 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 1118.253278] audit: type=1800 audit(1582566647.765:209): pid=884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16804 res=0 17:50:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) fcntl$dupfd(r1, 0x0, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:47 executing program 2: r0 = socket$inet(0x10, 0x10000000003, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="24000000f50307041dfffdd46fa2930020200a0009ec0300001d8568d9e264a3744632fe", 0x24}], 0x1}, 0x0) 17:50:47 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) [ 1118.429523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:48 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:48 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 17:50:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:48 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:48 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2284, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xc, &(0x7f0000001300)={r1, 0x3, 0x6, @dev}, 0x10) dup2(0xffffffffffffffff, r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000340)=0x3d0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x3}}, 0x0) getpid() 17:50:48 executing program 4: mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000840)='id_legacy\x00', 0x0, 0x0, 0x0, r0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000b80)="0800a1695e0bcfe87b0071ce8d2d09521f5c7485672e6fcb919995940aebaf6879f376af9ac0fad817f3b67bbadb3ab6d995ade5f7283fb4fa0dc1f07036481481a7e4ec8d441ec83574b3d6834d93e2e271224fd63fc32fc9cafa4c36140658c93d970abe34a115dda42062295035dc8228000300000000") r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={r3}, 0xc) keyctl$chown(0x4, r1, 0x0, 0x0) getpgrp(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 17:50:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1119.075388] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:48 executing program 1: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:48 executing program 4: pipe(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xfffffff, 0xc00, 0x0, [0xff0f, 0x3800000, 0x9000000]}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000180)={0x5, 0xc9, 0x1}) 17:50:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1119.269402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1119.389113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:49 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:49 executing program 1: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) fanotify_init(0x10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5543b44b00cbc63a4b14c037e4d60889e7a4e25df465cea3acfa42e37196650028258d358b512c74add39bd41100a552e54417942c7019e63cbea8f9eb07fe76e96526753a93646c3b697e3ad87a4b6ec8c3ccaf260f9f133e9e6147b2eb78321e14fb1d27374b8484d50cc77b6c67991ea3e7670000000000000000000015abf09fa83f8110abe2d5a7878ffae8f38746b7ce923651e2021ddb62577c794fa9b2d2c0c43957851cc29472084f3c547680c49633547db77fa7676feb757e2662445f293e984196c7cbd43fc56bcf10a71214a8b14ac0bec7f2"], 0x48}}, 0x0) r1 = getpid() tkill(r1, 0x9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$inet_udp(0x2, 0x2, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) 17:50:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:49 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/135, 0x75}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) 17:50:49 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) epoll_create(0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) socket$netlink(0x10, 0x3, 0x4) ioctl(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="080db5050600000047b071") epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000540)=0x1e5b, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x200408d4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) splice(r0, 0x0, r5, 0x0, 0x4ffe0, 0x0) 17:50:49 executing program 1: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1120.079093] device gretap0 entered promiscuous mode [ 1120.087164] device macvlan2 entered promiscuous mode [ 1120.107401] kauditd_printk_skb: 5 callbacks suppressed 17:50:49 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1120.107410] audit: type=1800 audit(1582566649.615:215): pid=994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17681 res=0 [ 1120.147370] device gretap0 left promiscuous mode 17:50:49 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1120.207862] audit: type=1800 audit(1582566649.695:216): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17681 res=0 17:50:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) [ 1120.314114] audit: type=1800 audit(1582566649.825:217): pid=1009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17586 res=0 [ 1120.551865] device gretap0 entered promiscuous mode [ 1120.556947] device macvlan2 entered promiscuous mode [ 1120.563975] device gretap0 left promiscuous mode 17:50:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:50 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:50 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) fanotify_init(0x10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000800000af00", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012000c0001006d6163766c616e00a6ff02000a000500040000000000000008000a00", @ANYRES32, @ANYBLOB="51e5ec736bf613910d50c86c1ec597ba6b1c3c5543b44b00cbc63a4b14c037e4d60889e7a4e25df465cea3acfa42e37196650028258d358b512c74add39bd41100a552e54417942c7019e63cbea8f9eb07fe76e96526753a93646c3b697e3ad87a4b6ec8c3ccaf260f9f133e9e6147b2eb78321e14fb1d27374b8484d50cc77b6c67991ea3e7670000000000000000000015abf09fa83f8110abe2d5a7878ffae8f38746b7ce923651e2021ddb62577c794fa9b2d2c0c43957851cc29472084f3c547680c49633547db77fa7676feb757e2662445f293e984196c7cbd43fc56bcf10a71214a8b14ac0bec7f2"], 0x48}}, 0x0) r1 = getpid() tkill(r1, 0x9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$inet_udp(0x2, 0x2, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e) 17:50:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000000114000400fe8000000000000000000000000000bb0c000200050001002f000000240002000c000200050001002f00040014000100080001000000000008000200e00000010800070000000000"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x1, 0x80b}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08418330e91000105ab071") 17:50:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) [ 1120.896326] audit: type=1800 audit(1582566650.395:218): pid=1036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17506 res=0 17:50:50 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1120.977944] device gretap0 entered promiscuous mode [ 1120.984369] device macvlan2 entered promiscuous mode [ 1121.008260] device gretap0 left promiscuous mode 17:50:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:50 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1121.113313] audit: type=1800 audit(1582566650.625:219): pid=1054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17573 res=0 17:50:50 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001300)="9c", 0x1}], 0x1}}], 0x1, 0x0) 17:50:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000000114000400fe8000000000000000000000000000bb0c000200050001002f000000240002000c000200050001002f00040014000100080001000000000008000200e00000010800070000000000"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x1, 0x80b}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08418330e91000105ab071") [ 1121.287448] audit: type=1800 audit(1582566650.795:220): pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17223 res=0 17:50:51 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:51 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="08418330e91000105ab071") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) 17:50:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000140)="08418330e91000105ab071") close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000906010300000100000000000000800005000100070000001c0007800c00028008000140ac1414000c00018008000140a51e00010900020073797a32"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 17:50:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$TIOCCONS(r1, 0x5427) [ 1121.700937] audit: type=1800 audit(1582566651.215:221): pid=1097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18049 res=0 17:50:51 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:51 executing program 4: getpid() r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9000000010001fff00000b002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800080001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="56d5a3faf4ceefd48b8e1a2b6db4fb5e8c27a1c4d7075dc9e6d30db21dbb84e16579d36010d794832fa89c39d6005cc41be50b53ce821aeea7bd857b44793dca6f22a997e963ca4145be518c2c4e829fa1b285ba1681c7bbbcfdfbf013a9599c9287b40cb05ae9f6a0e9e012a6996ccb8296301b8e37048e174dcf28a350d61ce725cb104359fb5334d4db8ac410770259590c7ad8b75aeb1fa314f631"], 0x90}}, 0x0) 17:50:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1121.864907] audit: type=1800 audit(1582566651.365:222): pid=1114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18065 res=0 [ 1122.035928] device ip6tnl1 entered promiscuous mode [ 1122.087567] device ip6tnl1 entered promiscuous mode 17:50:52 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:52 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba7cc8c03d7415f7ebb1b6ee35dd23dbea361a1dbce3457b44117f9ef8c6cfe6abb48c885ee9efaaf5e33fd3ab76140d688a1ecadc0fea90d7df55b56db06a1d891ade07e1e9c30527ab4c8b", 0x97}], 0x2, 0x5) 17:50:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:52 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x1500}]}}, &(0x7f0000004600)=""/200, 0x26, 0xc8, 0x8}, 0x20) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) 17:50:52 executing program 2: msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)=0x3) pipe(&(0x7f0000000040)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) [ 1122.616618] nla_parse: 9 callbacks suppressed [ 1122.616624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:52 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_procfs(0x0, 0x0) stat(0x0, &(0x7f00000003c0)) lstat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) dup3(r2, r1, 0x80000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000140)=0x14) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @mcast1, 0x4}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x38, 0x1, 0x2, 0x401, 0x4, 0x0, {}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x108, 0x464, 0x100, 0x70bd2b, 0x25dfdbfe, "464db68d278ac3b3c83fb572031341a4c3e60c671c0188352ad3fa38e57107588967b96fdeb4f6eba02852d1a07a79edabe9ea419b6095836803cc8fb38635e300f9515637ac28609c17782ed1cbed5f50c60ecd75edcbb984202a0b8cfa24070ff2165d7e30d464f14ecb9afe7a3fec6f3e361c2b9baa4483f4527666ce2ffd9ef6bbd2f4a8eeaf8250da01b861cbc4396342b99be922c5bb713d105756481b9508016bb2a96f6d8f20a7778b027f60c515446dc59252fd51230979138e1d2a8eef97ab61aecc2db04004f2727239fdee0788246a3bd94373af39ccce5295fcdd1f355bbcfdc443148ba146775084d5d080eae5dbe7f5", ["", "", "", "", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000050601010000000005050001000700000009000200000000000900030073797a310000000005000100070000000900020073797a31000000000900020073797a3100000000050001000700"/92], 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x20008040) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ncpfs\x00', 0x1000, &(0x7f00000002c0)='&\x00') sendmmsg$alg(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 17:50:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, 0x0, 0x0, 0x5) 17:50:52 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1122.666653] audit: type=1800 audit(1582566652.175:223): pid=1138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18157 res=0 17:50:52 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, 0x0, 0x0, 0x5) [ 1122.798471] audit: type=1800 audit(1582566652.305:224): pid=1157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18097 res=0 [ 1122.827424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1122.909362] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1122.974100] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. 17:50:53 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:53 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:53 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000006eda98860200000000000000de29f3af19726b"], 0x1a) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x3, 0x7, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @map={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x0, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000400)='.\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000b200000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@loopback, @remote}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@ipmr_delroute={0x28, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, {0x80, 0x0, 0x14, 0x6, 0xfe, 0x2, 0xc9}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x9, 0xf9, r6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$tun(r7, 0x0, 0x0) 17:50:53 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_procfs(0x0, 0x0) stat(0x0, &(0x7f00000003c0)) lstat(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, 0x0) dup3(r2, r1, 0x80000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000140)=0x14) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @mcast1, 0x4}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x38, 0x1, 0x2, 0x401, 0x4, 0x0, {}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x108, 0x464, 0x100, 0x70bd2b, 0x25dfdbfe, "464db68d278ac3b3c83fb572031341a4c3e60c671c0188352ad3fa38e57107588967b96fdeb4f6eba02852d1a07a79edabe9ea419b6095836803cc8fb38635e300f9515637ac28609c17782ed1cbed5f50c60ecd75edcbb984202a0b8cfa24070ff2165d7e30d464f14ecb9afe7a3fec6f3e361c2b9baa4483f4527666ce2ffd9ef6bbd2f4a8eeaf8250da01b861cbc4396342b99be922c5bb713d105756481b9508016bb2a96f6d8f20a7778b027f60c515446dc59252fd51230979138e1d2a8eef97ab61aecc2db04004f2727239fdee0788246a3bd94373af39ccce5295fcdd1f355bbcfdc443148ba146775084d5d080eae5dbe7f5", ["", "", "", "", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000050601010000000005050001000700000009000200000000000900030073797a310000000005000100070000000900020073797a31000000000900020073797a3100000000050001000700"/92], 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x20008040) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ncpfs\x00', 0x1000, &(0x7f00000002c0)='&\x00') sendmmsg$alg(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 17:50:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, 0x0, 0x0, 0x5) 17:50:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) 17:50:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1123.537396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:53 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:53 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_procfs(0x0, 0x0) stat(0x0, &(0x7f00000003c0)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000140)=0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @mcast1, 0x4}, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 1123.725874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) 17:50:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1123.772622] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1123.918657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:53 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_procfs(0x0, 0x0) stat(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903}, 0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x14, 0x1, 0x2, 0x401, 0x4}, 0x14}}, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380), 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 17:50:53 executing program 2: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 17:50:53 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) 17:50:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x5) 17:50:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1124.440291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:54 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_procfs(0x0, 0x0) stat(0x0, &(0x7f00000003c0)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903}, 0x20) syz_open_procfs(0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000140)=0x14) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500), 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x108, 0x464, 0x100, 0x70bd2b, 0x25dfdbfe, "464db68d278ac3b3c83fb572031341a4c3e60c671c0188352ad3fa38e57107588967b96fdeb4f6eba02852d1a07a79edabe9ea419b6095836803cc8fb38635e300f9515637ac28609c17782ed1cbed5f50c60ecd75edcbb984202a0b8cfa24070ff2165d7e30d464f14ecb9afe7a3fec6f3e361c2b9baa4483f4527666ce2ffd9ef6bbd2f4a8eeaf8250da01b861cbc4396342b99be922c5bb713d105756481b9508016bb2a96f6d8f20a7778b027f60c515446dc59252fd51230979138e1d2a8eef97ab61aecc2db04004f2727239fdee0788246a3bd94373af39ccce5295fcdd1f355bbcfdc443148ba146775084d5d080eae5dbe7f5", ["", "", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[]}}, 0x0) 17:50:54 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:54 executing program 2: syz_open_dev$vcsa(0x0, 0x0, 0x412800) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x5}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000004600)=""/200, 0x4a, 0xc8, 0x8}, 0x20) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) 17:50:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x5) [ 1124.629413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:50:54 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:54 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x803, 0x6e) r0 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x80003, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000040)="c9ce1bf27c0cc419366e1179037408c2a778e488c3883fe05a04", &(0x7f0000000280)=""/120}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0xffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) mlockall(0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) 17:50:54 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0xbc}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x10, &(0x7f0000000880)=""/193, 0x97}}], 0x4000000000003f9, 0x0, &(0x7f0000003700)={0x77359400}) 17:50:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x5) 17:50:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) [ 1125.399288] kauditd_printk_skb: 5 callbacks suppressed [ 1125.399297] audit: type=1800 audit(1582566654.905:230): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18176 res=0 17:50:55 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:55 executing program 4: 17:50:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) 17:50:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1125.672009] audit: type=1800 audit(1582566655.185:231): pid=1317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18163 res=0 [ 1126.232764] NOHZ: local_softirq_pending 08 [ 1126.237063] NOHZ: local_softirq_pending 08 17:50:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x803, 0x6e) r0 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x80003, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000040)="c9ce1bf27c0cc419366e1179037408c2a778e488c3883fe05a04", &(0x7f0000000280)=""/120}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0xffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) mlockall(0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) 17:50:55 executing program 4: 17:50:55 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:55 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30009, 0x0) 17:50:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) 17:50:55 executing program 4: 17:50:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)="34e0969f7e2142b2b64a6cda945b8654cb81f35ff041eee3400e652e7612a5ee5d8913a519e1d9213523b14f62ac11f7ee65172379c4c2d4fee21ee35ae768880278870fc87985bd073d91ba", 0x4c}], 0x2, 0x5) 17:50:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1126.364093] audit: type=1800 audit(1582566655.875:232): pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18155 res=0 17:50:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x803, 0x6e) r0 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x80003, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000040)="c9ce1bf27c0cc419366e1179037408c2a778e488c3883fe05a04", &(0x7f0000000280)=""/120}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0xffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) mlockall(0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) 17:50:56 executing program 4: 17:50:56 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r2, r3, 0x0, 0x8000fffffffe) 17:50:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:50:56 executing program 4: 17:50:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) [ 1126.607959] audit: type=1800 audit(1582566656.115:233): pid=1360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18187 res=0 17:50:56 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1126.837964] audit: type=1800 audit(1582566656.345:234): pid=1376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18155 res=0 17:50:56 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30009, 0x0) 17:50:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) 17:50:56 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f00000016c0)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x14}, 0x80, 0x0}, 0x0) 17:50:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:56 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:56 executing program 2: 17:50:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:56 executing program 4: 17:50:56 executing program 2: [ 1127.319742] audit: type=1800 audit(1582566656.825:235): pid=1390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18160 res=0 17:50:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) 17:50:56 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:56 executing program 4: [ 1127.546393] audit: type=1800 audit(1582566657.055:236): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18194 res=0 17:50:57 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30009, 0x0) 17:50:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, 0x0, 0x0) 17:50:57 executing program 2: 17:50:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) 17:50:57 executing program 4: 17:50:57 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:57 executing program 4: 17:50:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 1128.231684] audit: type=1800 audit(1582566657.735:237): pid=1423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18156 res=0 17:50:57 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)='4', 0x1}], 0x1, 0x5) 17:50:57 executing program 2: 17:50:57 executing program 4: [ 1128.409424] audit: type=1800 audit(1582566657.915:238): pid=1441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18189 res=0 17:50:58 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, 0x0, 0x0) 17:50:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)='4', 0x1}], 0x1, 0x5) 17:50:58 executing program 2: 17:50:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30009, 0x0) 17:50:58 executing program 4: 17:50:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17:50:58 executing program 2: 17:50:58 executing program 4: 17:50:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)='4', 0x1}], 0x1, 0x5) [ 1129.172480] audit: type=1800 audit(1582566658.685:239): pid=1459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18204 res=0 17:50:58 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(0x0, 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1129.279349] 9pnet: Insufficient options for proto=fd 17:50:58 executing program 2: 17:50:58 executing program 4: 17:50:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30009, 0x0) 17:50:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x0) 17:50:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17:50:58 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(0x0, 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:59 executing program 4: 17:50:59 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(0x0, 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1129.479920] 9pnet: Insufficient options for proto=fd 17:50:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17:50:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30009, 0x0) 17:50:59 executing program 0: 17:50:59 executing program 2: 17:50:59 executing program 4: 17:50:59 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1129.663818] 9pnet: Insufficient options for proto=fd 17:50:59 executing program 0: 17:50:59 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30009, 0x0) 17:50:59 executing program 2: 17:50:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:50:59 executing program 4: 17:50:59 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1129.848497] 9pnet: Insufficient options for proto=fd 17:50:59 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30009, 0x0) 17:50:59 executing program 2: 17:50:59 executing program 0: 17:50:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:50:59 executing program 4: 17:50:59 executing program 4: [ 1130.007846] 9pnet: Insufficient options for proto=fd 17:50:59 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:59 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x30009, 0x0) 17:50:59 executing program 0: 17:50:59 executing program 2: 17:50:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:50:59 executing program 0: 17:50:59 executing program 4: [ 1130.183514] 9pnet: Insufficient options for proto=fd 17:50:59 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:50:59 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:50:59 executing program 2: 17:50:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:50:59 executing program 0: 17:50:59 executing program 4: 17:50:59 executing program 2: 17:50:59 executing program 0: 17:50:59 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1130.400537] audit: type=1800 audit(1582566659.905:240): pid=1586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18200 res=0 17:51:00 executing program 4: 17:51:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:51:00 executing program 0: [ 1130.538041] audit: type=1800 audit(1582566660.045:241): pid=1599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=18155 res=0 17:51:00 executing program 2: 17:51:00 executing program 4: 17:51:00 executing program 0: 17:51:00 executing program 4: 17:51:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:51:00 executing program 4: 17:51:00 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:00 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:00 executing program 0: 17:51:00 executing program 4: 17:51:00 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) r1 = socket(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:51:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x14, 0x31, 0x30d}, 0x14}}, 0x0) 17:51:01 executing program 4: 17:51:01 executing program 0: [ 1131.436307] audit: type=1800 audit(1582566660.945:242): pid=1630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16913 res=0 17:51:01 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:01 executing program 4: [ 1131.557906] tc_ctl_action: received NO action attribs 17:51:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x14, 0x31, 0x30d}, 0x14}}, 0x0) 17:51:01 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1131.615732] audit: type=1800 audit(1582566661.125:243): pid=1644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17027 res=0 17:51:01 executing program 0: [ 1131.762214] tc_ctl_action: received NO action attribs [ 1131.773225] audit: type=1800 audit(1582566661.275:244): pid=1652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16996 res=0 17:51:01 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:01 executing program 4: 17:51:01 executing program 0: 17:51:01 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x14, 0x31, 0x30d}, 0x14}}, 0x0) 17:51:01 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @remote}, 0x10) r1 = socket(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:51:01 executing program 0: [ 1132.234920] tc_ctl_action: received NO action attribs 17:51:01 executing program 4: 17:51:01 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x18, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) [ 1132.275543] audit: type=1800 audit(1582566661.785:245): pid=1669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16835 res=0 17:51:01 executing program 4: 17:51:01 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 1132.422032] audit: type=1800 audit(1582566661.935:246): pid=1686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16986 res=0 [ 1132.538101] audit: type=1800 audit(1582566662.045:247): pid=1692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17115 res=0 17:51:02 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x18, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 17:51:02 executing program 4: 17:51:02 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:02 executing program 2: clone(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 17:51:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17:51:02 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = socket$inet(0x2, 0x2, 0xfc) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000740)=""/4096, &(0x7f0000000580)=0x1000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/137, 0x89}, {0x0}, {&(0x7f0000000380)=""/239, 0xef}, {&(0x7f0000000480)=""/158, 0x9e}, {0x0}, {&(0x7f0000000600)=""/136, 0x88}], 0x6, 0x9) [ 1133.089162] audit: type=1800 audit(1582566662.595:248): pid=1699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17027 res=0 17:51:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x18, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 17:51:02 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) syz_open_dev$amidi(0x0, 0x0, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000100)=0x5) umount2(&(0x7f0000000240)='./file0\x00', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x81, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x8, 0xea43, 0x6, r4}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000400)={r4, @in={{0x2, 0x4e20, @loopback}}}, 0x84) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340), 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1133.206084] audit: type=1800 audit(1582566662.715:249): pid=1713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17223 res=0 17:51:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:51:03 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:03 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:51:03 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:03 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) syz_open_dev$amidi(0x0, 0x0, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000100)=0x5) umount2(&(0x7f0000000240)='./file0\x00', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000)='NLBL_MGMT\x00') ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x81, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x8, 0xea43, 0x6, r4}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000400)={r4, @in={{0x2, 0x4e20, @loopback}}}, 0x84) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340), 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:51:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x24, 0x31, 0x30d, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x0) 17:51:03 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:03 executing program 5: r0 = socket$inet6(0xa, 0x800000003, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x8000fffffffe) 17:51:03 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:51:03 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 17:51:04 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:04 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:51:04 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 17:51:04 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:51:04 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:04 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(r0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) 17:51:04 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 17:51:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:04 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 17:51:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:05 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:05 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:05 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 17:51:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:05 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:51:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:51:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:05 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x0) [ 1135.813070] kauditd_printk_skb: 8 callbacks suppressed [ 1135.813084] audit: type=1800 audit(1582566665.325:258): pid=1827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17281 res=0 17:51:05 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x0) 17:51:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) [ 1135.959392] audit: type=1800 audit(1582566665.455:259): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17716 res=0 [ 1136.132972] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1136.141488] FAT-fs (loop4): Filesystem has been set read-only [ 1136.147690] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970771) 17:51:05 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x44042, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) sendfile(r3, r4, 0x0, 0x0) [ 1136.296757] audit: type=1800 audit(1582566665.785:260): pid=1856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17713 res=0 17:51:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) [ 1136.420208] audit: type=1800 audit(1582566665.895:261): pid=1862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17702 res=0 17:51:06 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:06 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:51:06 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 17:51:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r3, r3, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) socket$inet6(0xa, 0x5, 0xf4) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x0, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:51:06 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:06 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:06 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) [ 1137.126495] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1137.134961] FAT-fs (loop1): Filesystem has been set read-only [ 1137.142463] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1137.216832] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1137.225215] FAT-fs (loop4): Filesystem has been set read-only [ 1137.231414] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 17:51:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:07 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:07 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:07 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180), 0x0) 17:51:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, 0x0) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) [ 1138.002921] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1138.011604] FAT-fs (loop1): Filesystem has been set read-only [ 1138.017894] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970771) 17:51:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) [ 1138.235523] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1138.244087] FAT-fs (loop4): Filesystem has been set read-only [ 1138.250776] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970771) 17:51:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:07 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:08 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:08 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:08 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) [ 1139.134451] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1139.142919] FAT-fs (loop4): Filesystem has been set read-only [ 1139.149289] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 17:51:08 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:08 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x0, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:51:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000180)=0x5, 0x0) 17:51:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:09 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:09 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) [ 1140.488711] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1140.497162] FAT-fs (loop4): Filesystem has been set read-only [ 1140.503954] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970771) 17:51:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) [ 1140.894284] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1140.902859] FAT-fs (loop1): Filesystem has been set read-only [ 1140.916000] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1140.975762] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1140.984431] FAT-fs (loop5): Filesystem has been set read-only [ 1140.990750] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF 17:51:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:10 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400011d, 0x101, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7a1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') socket$inet6(0xa, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@loopback, 0x80000018, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r4 = socket$inet6(0xa, 0x3, 0x9) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r10, 0x208200) fadvise64(r10, 0x0, 0x0, 0x3) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1b) write$binfmt_misc(r11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@loopback, 0x0, r6}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0xaa) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0xde0a}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 17:51:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)='4', 0x1}], 0x2, 0x5) 17:51:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, 0x0, 0x0, 0x5) 17:51:10 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:11 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, 0x0, 0x0, 0x5) 17:51:11 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:11 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, 0x0, 0x0, 0x5) 17:51:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(0x0, 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) [ 1141.962141] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 1141.970566] FAT-fs (loop5): Filesystem has been set read-only [ 1141.977056] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970769) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x5) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x5) 17:51:11 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:11 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2, 0x5) 17:51:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) 17:51:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) 17:51:12 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400011d, 0x101, 0x0) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7a1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') socket$inet6(0xa, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x18, r2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r3 = socket$inet6(0xa, 0x3, 0x9) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={@loopback, 0x0, r5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0xaa) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0xde0c}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) r7 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_proto_private(r7, 0x89ec, &(0x7f0000000340)="df841df9b501b1f51b3a4fa67d7ee40daa52992a358dbaf581a667458b267bed98a491a7073cdd2bdf5769433992e1ee94b4ab4a7c357bee3630c0940420508476b43b82c4ade4e2d8f283de6abbfbfe005cf4a5b0952bc0178eacc87e3988ed17b9c906ba57d35790e88b093997a6aa12527edaa353724cbc7d2c934f640c43f904130083c32d020023fc37b98078329626dc37ff5b19a1b092009a0ffea9cd1e644f9687c86d802ae980503bd8c3b7790327bf2f2279663ab290627cc28e3650b7ba20884a51c9590e6d681e6889d42cca05") socket$inet6(0xa, 0x3, 0x100000001) r8 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010044) 17:51:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)}], 0x2, 0x5) 17:51:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)='4', 0x1}], 0x1, 0x5) 17:51:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) 17:51:12 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:12 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x0, 0x10140, 0x0) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7a1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') socket$inet6(0xa, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@remote, 0x18, r2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r3 = socket$inet6(0xa, 0x3, 0x9) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x35, r5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) sendto$inet(r7, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r7, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) fcntl$setpipe(r6, 0x407, 0xaa) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0xde0c}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) 17:51:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) 17:51:12 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x5) 17:51:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)}], 0x1, 0x5) 17:51:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)}], 0x1, 0x5) [ 1143.952312] FAT-fs (loop5): invalid media value (0x00) [ 1143.957772] FAT-fs (loop5): Can't find a valid FAT filesystem 17:51:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)}], 0x1, 0x5) 17:51:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:13 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)='4', 0x1}], 0x1, 0x0) 17:51:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)='4', 0x1}], 0x1, 0x0) 17:51:13 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2042, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)='4', 0x1}], 0x1, 0x0) [ 1144.368377] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1144.376862] FAT-fs (loop4): Filesystem has been set read-only [ 1144.383150] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 970771) 17:51:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(r1) 17:51:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:14 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1145.611543] FAT-fs (loop2): invalid media value (0x00) [ 1145.617148] FAT-fs (loop2): Can't find a valid FAT filesystem 17:51:15 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:15 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:15 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:15 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:16 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) [ 1146.697821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1146.706472] FAT-fs (loop4): Filesystem has been set read-only [ 1146.718301] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 17:51:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:16 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:16 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1147.278998] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1147.287442] FAT-fs (loop1): Filesystem has been set read-only [ 1147.294283] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 17:51:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1147.622673] FAT-fs (loop2): invalid media value (0x00) [ 1147.783000] FAT-fs (loop2): Can't find a valid FAT filesystem 17:51:17 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7627}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400011d, 0x101, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x2000000000007a1, 0x55f503) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') socket$inet6(0xa, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$audion(0xffffffffffffffff, 0x51a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001e00bd93000000000000000000000000000000b04243a85d9c6d85c3d987d63a0600"/64], 0x50}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@newae={0x50, 0x1e, 0xa28246b24ccc93bd, 0x0, 0x0, {{@in=@empty}, @in=@loopback}, [@replay_val={0x10}]}, 0x50}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@newae={0x50, 0x1e, 0xa28246b24ccc93bd, 0x0, 0x0, {{@in=@empty}, @in=@loopback}, [@replay_val={0x10}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x9a) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x18, r6}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r7 = socket$inet6(0xa, 0x3, 0x9) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={@loopback, 0x0, r9}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0xaa) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0xde0c, 0x0, 0x0, 0x4}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) socket$inet6(0xa, 0x3, 0x100000001) r11 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x4, 0x5}, 'port1\x00', 0xd34dfe0ea5f140d9, 0x844, 0x800, 0x9, 0x8000004, 0x10002, 0x6, 0x0, 0x4, 0x7f}) sendfile(r11, r12, 0x0, 0x4000000000010044) 17:51:17 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:17 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7627}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400011d, 0x101, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x2000000000007a1, 0x55f503) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') socket$inet6(0xa, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$audion(0xffffffffffffffff, 0x51a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001e00bd93000000000000000000000000000000b04243a85d9c6d85c3d987d63a0600"/64], 0x50}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@newae={0x50, 0x1e, 0xa28246b24ccc93bd, 0x0, 0x0, {{@in=@empty}, @in=@loopback}, [@replay_val={0x10}]}, 0x50}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@newae={0x50, 0x1e, 0xa28246b24ccc93bd, 0x0, 0x0, {{@in=@empty}, @in=@loopback}, [@replay_val={0x10}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x9a) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x18, r6}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r7 = socket$inet6(0xa, 0x3, 0x9) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={@loopback, 0x0, r9}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0xaa) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0xde0c, 0x0, 0x0, 0x4}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) socket$inet6(0xa, 0x3, 0x100000001) r11 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x4, 0x5}, 'port1\x00', 0xd34dfe0ea5f140d9, 0x844, 0x800, 0x9, 0x8000004, 0x10002, 0x6, 0x0, 0x4, 0x7f}) sendfile(r11, r12, 0x0, 0x4000000000010044) [ 1148.076311] nla_parse: 5 callbacks suppressed [ 1148.076318] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 17:51:17 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1148.176232] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 17:51:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:18 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:18 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:19 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:19 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:19 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1150.581538] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1150.585071] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1150.589922] FAT-fs (loop2): Filesystem has been set read-only [ 1150.598158] FAT-fs (loop1): Filesystem has been set read-only [ 1150.598256] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1150.604374] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 17:51:20 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:20 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:20 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:20 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400011d, 0x101, 0x0) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7a1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') socket$inet6(0xa, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@newae={0x50, 0x1e, 0xa28246b24ccc93bd, 0x0, 0x0, {{@in=@empty}, @in=@loopback}, [@replay_val={0x10}]}, 0x50}}, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x18, r2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r3 = socket$inet6(0xa, 0x3, 0x9) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={@loopback, 0x0, r5}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0xaa) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0xde0c}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) socket$inet6(0xa, 0x3, 0x100000001) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010044) 17:51:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(r1) 17:51:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:21 executing program 1: getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400011d, 0x101, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7a1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') socket$inet6(0xa, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) getsockname$packet(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x3e, r2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) r4 = socket$inet6(0xa, 0x3, 0x9) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@loopback, 0x0, r6}) pipe(&(0x7f0000000300)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$setpipe(r7, 0x407, 0xaa) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0xde0c}, 0x0) socketpair(0x27, 0x0, 0x6, &(0x7f00000001c0)) r8 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x3, 0x503000) accept(r8, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) socket$inet6(0xa, 0x3, 0x100000001) r9 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x4000000000010044) [ 1151.646921] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1151.655628] FAT-fs (loop5): Filesystem has been set read-only [ 1151.661964] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970771) 17:51:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:21 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:21 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:21 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:22 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1152.853779] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1152.862502] FAT-fs (loop5): Filesystem has been set read-only [ 1152.868540] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1153.139422] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1153.147998] FAT-fs (loop2): Filesystem has been set read-only [ 1153.159375] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 17:51:22 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) [ 1153.236319] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1153.245936] FAT-fs (loop1): Filesystem has been set read-only [ 1153.252301] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 17:51:22 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1153.988488] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1153.997418] FAT-fs (loop5): Filesystem has been set read-only [ 1154.003760] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970771) 17:51:23 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) 17:51:24 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000002ac0)='./bus\x00', &(0x7f0000002b00)='9p\x00', 0x8800, &(0x7f0000002b40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x30009, 0x0) [ 1154.512880] FAT-fs (loop1): invalid media value (0x00) [ 1154.518672] FAT-fs (loop1): Can't find a valid FAT filesystem 17:51:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x0, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) 17:51:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000100)='./file0\x00', 0x1c3) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0100"], 0x2) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0xf4) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) getsockname$packet(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='self-{cgroup\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e22, @rand_addr=0x9c6b}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0xddc}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @empty, 0x800}], 0x78) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000005c0)={@mcast1}, &(0x7f0000000600)=0x14) sendfile(r4, r6, &(0x7f0000000180)=0x5, 0x0) [ 1155.425421] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 1155.434355] FAT-fs (loop1): Filesystem has been set read-only [ 1155.440734] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1155.520877] FAT-fs (loop2): bogus number of reserved sectors [ 1155.520889] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1297.752912] NOHZ: local_softirq_pending 08 [ 1318.234132] NOHZ: local_softirq_pending 08 [ 1331.032862] NOHZ: local_softirq_pending 08 [ 1359.191831] NOHZ: local_softirq_pending 08 [ 1371.991276] NOHZ: local_softirq_pending 08 [ 1379.671710] NOHZ: local_softirq_pending 08 [ 1431.510445] INFO: task syz-executor.0:2812 blocked for more than 140 seconds. [ 1431.518052] Not tainted 4.14.171-syzkaller #0 [ 1431.524226] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.532622] syz-executor.0 D28288 2812 1 0x00000004 [ 1431.538356] Call Trace: [ 1431.544579] __schedule+0x7b8/0x1cd0 [ 1431.548350] ? firmware_map_remove+0x196/0x196 [ 1431.553550] schedule+0x92/0x1c0 [ 1431.556926] schedule_timeout+0x93b/0xe10 [ 1431.563742] ? wait_for_completion+0x274/0x420 [ 1431.568361] ? find_held_lock+0x35/0x130 [ 1431.572498] ? usleep_range+0x130/0x130 [ 1431.576582] ? wait_for_completion+0x274/0x420 [ 1431.583881] ? _raw_spin_unlock_irq+0x28/0x90 [ 1431.588397] ? trace_hardirqs_on_caller+0x400/0x590 [ 1431.593619] wait_for_completion+0x27c/0x420 [ 1431.598276] ? wait_for_completion_interruptible+0x490/0x490 [ 1431.606932] ? wake_up_q+0xf0/0xf0 [ 1431.610533] ? trace_hardirqs_on_caller+0x400/0x590 [ 1431.615666] flush_work+0x3eb/0x730 [ 1431.619292] ? insert_work+0x320/0x320 [ 1431.625812] ? flush_workqueue_prep_pwqs+0x470/0x470 [ 1431.631021] ? __cancel_work_timer+0x166/0x480 [ 1431.635644] __cancel_work_timer+0x2f0/0x480 [ 1431.642691] ? cancel_delayed_work+0x20/0x20 [ 1431.647132] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1431.652352] ? trace_hardirqs_on_caller+0x400/0x590 [ 1431.657382] cancel_work_sync+0x18/0x20 [ 1431.663823] p9_fd_close+0x2ae/0x450 [ 1431.667555] p9_client_create+0x787/0x1120 [ 1431.671996] ? p9_client_zc_rpc.constprop.0+0x1120/0x1120 [ 1431.677565] ? __kmalloc_track_caller+0x372/0x790 [ 1431.684911] ? __lockdep_init_map+0x10c/0x570 [ 1431.689441] ? lockdep_init_map+0x9/0x10 [ 1431.693568] ? __raw_spin_lock_init+0x2d/0x100 [ 1431.698286] v9fs_session_init+0x1dc/0x1620 [ 1431.705149] ? check_preemption_disabled+0x3c/0x250 [ 1431.710218] ? v9fs_show_options+0x730/0x730 [ 1431.714627] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1431.720475] ? v9fs_mount+0x5e/0x870 [ 1431.724283] ? rcu_read_lock_sched_held+0x110/0x130 [ 1431.729354] ? kmem_cache_alloc_trace+0x623/0x790 [ 1431.734305] ? free_pages+0x46/0x50 [ 1431.738048] v9fs_mount+0x7d/0x870 [ 1431.742238] mount_fs+0x97/0x2a1 [ 1431.745622] vfs_kern_mount.part.0+0x5e/0x3d0 [ 1431.750285] do_mount+0x417/0x27d0 [ 1431.753825] ? retint_kernel+0x2d/0x2d [ 1431.757812] ? copy_mount_string+0x40/0x40 [ 1431.762233] ? copy_mount_options+0x162/0x2f0 [ 1431.766732] ? copy_mount_options+0x1fe/0x2f0 [ 1431.771294] SyS_mount+0xab/0x120 [ 1431.774835] ? copy_mnt_ns+0x8c0/0x8c0 [ 1431.779251] do_syscall_64+0x1e8/0x640 [ 1431.783242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1431.788300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.793564] RIP: 0033:0x45c429 [ 1431.796755] RSP: 002b:00007f59ab3e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1431.804618] RAX: ffffffffffffffda RBX: 00007f59ab3e66d4 RCX: 000000000045c429 [ 1431.812147] RDX: 0000000020002b00 RSI: 0000000020002ac0 RDI: 0000000000000000 [ 1431.819758] RBP: 000000000076bfc0 R08: 0000000020002b40 R09: 0000000000000000 [ 1431.827110] R10: 0000000000008800 R11: 0000000000000246 R12: 00000000ffffffff [ 1431.834593] R13: 000000000000074b R14: 00000000004c9c5f R15: 000000000076bfcc [ 1431.842219] [ 1431.842219] Showing all locks held in the system: [ 1431.848549] 1 lock held by khungtaskd/1057: [ 1431.853087] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 1431.862235] 1 lock held by rsyslogd/7184: [ 1431.866420] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 1431.874805] 2 locks held by getty/7306: [ 1431.878792] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1431.887701] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1431.897101] 2 locks held by getty/7307: [ 1431.901219] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1431.910153] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1431.919613] 2 locks held by getty/7308: [ 1431.923687] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1431.932427] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1431.941784] 2 locks held by getty/7309: [ 1431.945870] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1431.954855] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1431.964344] 2 locks held by getty/7310: [ 1431.968325] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1431.977087] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1431.986443] 2 locks held by getty/7311: [ 1431.990526] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1431.999336] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1432.010374] 2 locks held by getty/7312: [ 1432.014342] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1432.023349] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1432.032961] 2 locks held by kworker/0:2/32538: [ 1432.037548] #0: ("events"){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 1432.046020] #1: ((&m->wq)){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 1432.054642] [ 1432.056259] ============================================= [ 1432.056259] [ 1432.063945] NMI backtrace for cpu 0 [ 1432.067586] CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 4.14.171-syzkaller #0 [ 1432.075036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.084569] Call Trace: [ 1432.087153] dump_stack+0x142/0x197 [ 1432.090777] nmi_cpu_backtrace.cold+0x57/0x94 [ 1432.095422] ? irq_force_complete_move.cold+0x7d/0x7d [ 1432.100652] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 1432.106090] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1432.111306] watchdog+0x5e7/0xb90 [ 1432.114772] kthread+0x319/0x430 [ 1432.118205] ? hungtask_pm_notify+0x50/0x50 [ 1432.122560] ? kthread_create_on_node+0xd0/0xd0 [ 1432.127246] ret_from_fork+0x24/0x30 [ 1432.131284] Sending NMI from CPU 0 to CPUs 1: [ 1432.135832] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff8668ce8e [ 1432.136867] Kernel panic - not syncing: hung_task: blocked tasks [ 1432.149338] CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 4.14.171-syzkaller #0 [ 1432.156804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.166161] Call Trace: [ 1432.168791] dump_stack+0x142/0x197 [ 1432.172410] panic+0x1f9/0x42d [ 1432.175663] ? add_taint.cold+0x16/0x16 [ 1432.179630] ? ___preempt_schedule+0x16/0x18 [ 1432.184073] watchdog+0x5f8/0xb90 [ 1432.187539] kthread+0x319/0x430 [ 1432.190968] ? hungtask_pm_notify+0x50/0x50 [ 1432.195398] ? kthread_create_on_node+0xd0/0xd0 [ 1432.200092] ret_from_fork+0x24/0x30 [ 1432.205695] Kernel Offset: disabled [ 1432.209340] Rebooting in 86400 seconds..