x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x200)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @rand_addr=0x100}, 0x263, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)='geneve0\x00', 0x9, 0xf64, 0x7fff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="20010000", @ANYRES16=r12, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20004020}, 0x20000001)
r13 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3bf23e476f9f5a234d48eebfffaaae1cc14f103eec29d5003b8c8123ab1344c7a654e937bd4de5f94524c2127e5065bc96ecdc445f10717440b8adeb78296b55806f0c8d535c1c02b2296373dde538383639474b932f0667b26ac5110ce531b8fb47789d430e1cd596", @ANYBLOB="bf2884ef253114c092501be0d00ce3e7ae354750cc2e58e1a62b62f534b5b50f7657596b183ee5df2c8df44d31416cc3889457d751b3", @ANYBLOB="874b000000000000000005000000"], 0x3}, 0x1, 0x0, 0x0, 0x4040804}, 0x80c0)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="10002cbd7000fedbdf006200000027849a00020000000500ff003f000100"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc000)
ftruncate(r2, 0x8200)

[ 2172.158550][   T22] audit: type=1107 audit(2000001905.102:10377): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2172.188282][   T22] audit: type=1107 audit(2000001905.122:10378): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2172.194148][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2172.220438][T30791] FAT-fs (loop4): Filesystem has been set read-only
[ 2172.220666][   T22] audit: type=1107 audit(2000001905.152:10379): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2172.228449][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:05 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000340)=""/4096, 0x1000)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x43, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)

[ 2172.242895][   T22] audit: type=1107 audit(2000001905.152:10380): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2172.256117][T30783] selinux_nlmsg_perm: 7 callbacks suppressed
[ 2172.256126][T30783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pig=30783 comm=syz-executor.3
[ 2172.267483][T30781] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2172.274247][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2172.286485][   T22] audit: type=1107 audit(2000001905.152:10381): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2172.303978][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2172.319038][   T22] audit: type=1107 audit(2000001905.162:10382): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2172.339368][T30781] FAT-fs (loop1): Filesystem has been set read-only
04:05:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./bus\x00', 0x200000, 0x14)
fchdir(r0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000900)='./bus\x00', &(0x7f0000000940)='trusted.overlay.nlink\x00', &(0x7f0000000980)={'U-', 0xebf6}, 0x16, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/912], 0x390)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x6427, 0x6, 0x7ff})
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x1)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x109240, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x4000)
socket$inet6(0xa, 0x4, 0x3)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14)
stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
write$FUSE_CREATE_OPEN(r7, &(0x7f0000000840)={0xa0, 0x0, 0x1, {{0x5, 0x1, 0x4, 0x60, 0x8, 0x7, {0x0, 0xff, 0x6, 0x9, 0x81, 0x8, 0x4ca, 0x4, 0x6, 0x9d9, 0x1, r8, r9, 0x88, 0x400}}, {0x0, 0x4}}}, 0xa0)
unshare(0x10000000)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/cpuinfo\x00', 0x0, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40)='nl80211\x00')
sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r11, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xf80c7263f1e38bb8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x0)
ftruncate(r6, 0x8200)

[ 2172.348747][   T22] audit: type=1107 audit(2000001905.202:10383): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2172.350395][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2172.377548][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2172.387506][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2172.397281][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
recvmmsg(r0, &(0x7f0000006600)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/142, 0xfffffffffffffcc8}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000600)=""/147, 0x93}], 0x7, &(0x7f00000006c0)=""/202, 0xca}, 0x9}, {{&(0x7f00000007c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000001940)=""/243, 0xf3}], 0x4, &(0x7f0000001a80)=""/171, 0xab}, 0x7}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000001b40)=""/215, 0xd7}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/134, 0x86}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/210, 0xd2}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0x6, &(0x7f0000004e80)=""/51, 0x33}, 0x4}, {{&(0x7f0000004ec0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004f40)=""/88, 0x58}, {&(0x7f0000004fc0)=""/212, 0xd4}, {&(0x7f00000050c0)=""/60, 0x3c}], 0x3}, 0x3f3a}, {{&(0x7f0000005140), 0x80, &(0x7f00000052c0)=[{&(0x7f00000051c0)=""/200, 0xc8}], 0x1, &(0x7f0000005300)=""/2, 0x2}}, {{&(0x7f0000005340)=@nfc_llcp, 0x80, &(0x7f0000006580)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/187, 0xc9}, {&(0x7f00000064c0)=""/80, 0x50}, {&(0x7f0000006540)=""/47, 0x2f}], 0x4, &(0x7f00000065c0)=""/30, 0x1e}, 0xffff4675}], 0x6, 0x10100, &(0x7f0000006780)={0x77359400})
openat$full(0xffffffffffffff9c, &(0x7f0000006800)='/dev/full\x00', 0x400280, 0x0)
unlink(&(0x7f00000067c0)='./file0\x00')
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2172.406621][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2172.416020][T30791] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="34007788ef9ce1c5acbc6017fec60c857a890b24cb7b00015895c4f0037c00836f08b6772703ff40346e85521d3c6c74e5440ea7a0dfc03160a1d3420a341308c25a649916b4f6c0e9d1080bcbdcb31b56eea8f2fb7deaa2e42ffb80eec472b754e238bad775f6cc6ce5fbdc6d9082e35747104770bd7e633f5c712193a90a4fb3ec632bce6146b50eb8170bdbf9aa374b14f98e8087c6406256900f8319467d", @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf25010000000000000001410000001800170000000a0000fc057564703a7300043000000000"], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x8002004)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r9)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r13 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r12)
r14 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r13)
keyctl$chown(0x4, r14, 0x0, r11)
r15 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0)
write$P9_RGETATTR(r15, &(0x7f0000000480)={0xa0, 0x19, 0x1, {0x10, {0x40, 0x5, 0xc}, 0x74ed90758c34f6b4, r9, r11, 0x81, 0xfffffffffffff163, 0x0, 0x6, 0x800, 0x525, 0x100000001, 0xee, 0x8000, 0x401, 0x81f4, 0x7, 0xffffffffffffff87, 0x3, 0x8}}, 0xa0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1b00})

04:05:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1300})

04:05:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000000))

04:05:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x158, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008040}, 0x4488c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fchdir(r3)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0))
ftruncate(r4, 0x8200)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1965}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xc4fc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)

04:05:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140005000000000000000000000000000000000a140000001100010000000000000000000000000a14a2cc79222b8ca0ccace3cf3f24ef741dd179570f094e1e2f9f12bdbecd20335c91f238796492fd7790ba8d9f5e1cd3979943b5b13d488373835a6d3095447b83eccb399cc0867126e47435ab7c5de6d3a319214d1b826d7e755d5a84b5"], 0x28}}, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8)
sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000240)=@ll={0x11, 0x4, r6, 0x1, 0x9, 0x6, @broadcast}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="4e64c0c0b4ed01495cac8df00c9d88ab3d807c3f4b7f48455da80f50ac1ae679bcbe76426f19b4e560283dea15bbe18493c48aba0755d6e418cf484801d3670f6e0e8e2e96a227463639353edf27617cdce3cde7a93262b75651eba1cffbd67850950e0477d6b6844fab637646c840ade0624909bff138b42e5c9234cda2f9b8bcfe56021bd707f750b20746be6b3614ec1305c7895992b608cc6969885fa164ecf773a3c71cefd7551ed045b587f0a0bac56efaca5528595cb08d496a69093e9687594ac6f319fa14bf8df39b90402b22163cf390d0aed369b39a72c8aafbf1a362333375caf0c2bce751dc9ccda907b8ee5c73261406f6", 0xf8}, {&(0x7f0000000680)="ea1d0023d5c6f5e6fa9c6c27d292d383d31bb9cd21ae1a74fe02098972c8f7439eac909c2acaa039d303c8b2ec9141f3740dc2efd683970dc4422509da8508957969cc3459d661843791948d85642879642c6c7df68018f4d02973659f9226070c6f0b4dab9c2ca119deb79c2fd93bd2b232bd553afc460ed0b7907db7cc579750529c99ffb12e5106", 0x89}, {&(0x7f0000000740)="9fd600f26dd5fbb06ec7023234fa92a1b6246ade792a8d0bcaa20ed16d176d9ce04abc0645f8e79edf2ec8e61667dcea2c687a5cae72195129a17f8a61ead51a6d53e0d52980696e8d49c9900cc848d43c6cd6130d21fb1d3b196815b92a07c554caf309939615789a89d3c99d9ec709fd0252e3bbc51083821579b80444d73994ed3a81612f5e2afe18db1e811bb0689d59df0888e022f96b308ae48dacb14bcfe42935a30a6c11d2c91c", 0xab}, {&(0x7f0000000340)="a3e61619d6bb8970da9b3e2fb342e28c243e6da76381ee98b0e786a7b36410b0afa29320b2ef72542b64cb5a40d8a8be2abcc24b201614aaf7b78b2c186ced9826fdf9d8e88c7fcd183612f972897eea6c75", 0x52}], 0x4, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xc0}}], 0x1, 0x8800)
r7 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2172.801637][T31038] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=31038 comm=syz-executor.3
[ 2172.941107][T31051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=31051 comm=syz-executor.4
[ 2172.999850][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.009785][T31051] FAT-fs (loop4): Filesystem has been set read-only
[ 2173.017371][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.030162][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2173.055706][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.077379][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.087398][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.096368][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.105183][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.114301][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.124840][T31051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$RTC_UIE_ON(r4, 0x7003)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00')
sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x4, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64804}, 0x20004090)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x67ed8a37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000)

04:05:06 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x800, &(0x7f0000000300)={0xa, 0x4e20, 0x1f, @mcast1}, 0x1c)

04:05:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e6661740002040100020002f0f7f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x40)
ftruncate(r1, 0x8200)

[ 2173.320143][T31289] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2173.329972][T31289] FAT-fs (loop1): Filesystem has been set read-only
04:05:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x4)
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1fd)
sendto$inet(r1, &(0x7f00000000c0)="02584ed23f110d1726b41282d67decea9d2ac2548afe2bb2054cd030b2aeda6f1518014aa88dad3cb51f9f6876cb1a216b3b62d63cedcff87ef1540139d41e0b0589aea0a7a17cb38cc9bd86b75659f954ea2016ddc492ba811b6148c30ed855e1ad00e5df0bd52c5b8f22e5e218a13080d000258002c63f0bc59d3f7804384f2864867d67804b81dc572032be785c311ac0bd89d55dd9d0ee71f2a5e542ac7cf3e34ebf3e62043f5a03acfadde1fa784f5328df8323f450d7e072db6e692a7c241a27067081b440ad6af29384d36bf785f8e7e3577986d8281e5d9c706e68214381aef1a5eb21d2246ac24f470288c8307ea483d3eda14348b2", 0xfa, 0x10000000, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ftruncate(r2, 0x8200)

04:05:06 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "09715cd270130aef", "9736a21b274c196e29aa3eb1feb98e1f", "e9f9c483", "4430efd34e9e5f30"}, 0x28)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2173.360713][T31287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=31287 comm=syz-executor.4
[ 2173.383521][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.392814][T31287] FAT-fs (loop4): Filesystem has been set read-only
[ 2173.402202][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.411458][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.426639][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.436491][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.445502][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.454266][T31298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=31298 comm=syz-executor.4
[ 2173.454993][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.476406][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.485110][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2173.494880][T31287] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1c00})

04:05:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1400})

04:05:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
set_robust_list(&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x807, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18)

04:05:06 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
fstat(0xffffffffffffffff, &(0x7f0000000080))
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:06 executing program 3:
r0 = socket$inet(0x2, 0xa, 0x6)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000340)={<r5=>0x0, @dev, @remote}, &(0x7f0000000380)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', r5})
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r6)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x12000, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[r6, r8, r9]}, 0x3)
ftruncate(r7, 0x8200)

04:05:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xcc329098cbbc009b)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005304060063490000000000000000000a14c9488ad24910d587966bd79c83b4b5bb000000"], 0x28}}, 0x0)
getpeername$netlink(r5, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = dup2(r8, r7)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r9)
getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
ftruncate(r4, 0x8200)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2173.594009][T31298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=31298 comm=syz-executor.4
[ 2173.616637][T31298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=31298 comm=syz-executor.4
04:05:06 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@dstopts={0x2}, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "258e0e28038c7b69", "65367df8bf3c8006c4ef941f33aebda372b1f9f3d527d8dd999849464f421d15", "f39dc713", "8e04c709c32081c1"}, 0x38)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r8 = dup2(r7, r6)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8)
setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000000000)=0x3, 0xffffffffffffff4b)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x3, @mcast1}, 0x1c)

04:05:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
finit_module(r1, &(0x7f0000000000)='selinuxproc[ppp0\x00', 0x1)

04:05:06 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x9)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lchown(&(0x7f0000000080)='./file0\x00', 0x0, r2)

04:05:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x80, 0x4, 0x4}, 0x8000}}, 0x18)
ftruncate(r0, 0x8200)

[ 2174.020377][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.030244][T31513] FAT-fs (loop4): Filesystem has been set read-only
[ 2174.037496][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.047696][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.057749][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x800, 0x29)
ftruncate(r1, 0x8200)

[ 2174.071477][T31561] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2174.080968][T31561] FAT-fs (loop1): Filesystem has been set read-only
[ 2174.085677][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.098167][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.107695][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:07 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = dup2(r7, r6)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8)
setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000100)=0x2, 0xfffffffffffffeb8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2174.117032][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.126743][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.136637][T31513] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.255275][T31677] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2174.264248][T31677] FAT-fs (loop1): Filesystem has been set read-only
04:05:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = dup2(r8, r7)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9)
statx(r9, &(0x7f0000000100)='./file1\x00', 0x2000, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r12 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r13 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r14 = dup2(r13, r12)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r14)
statx(r14, &(0x7f0000000180)='./bus\x00', 0x0, 0x8c1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='fuse\x00', 0x40000, &(0x7f0000000680)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@euid_gt={'euid>', r15}}, {@subj_user={'subj_user', 0x3d, 'NLBL_MGMT\x00'}}, {@subj_type={'subj_type', 0x3d, 'NLBL_MGMT\x00'}}]}})
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00')

04:05:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1500})

04:05:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f81249fd8fca00cae8a22b", 0x20}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x529000, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x800, 0xfc76, 0x101, 0xffffffff, 0x7f, "512c6c3462c4e71605fa837a4e334183380bf0", 0x6, 0x81})
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$vsock_dgram(0x28, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000080)=0x8)
ftruncate(r2, 0x8200)
chdir(&(0x7f0000000000)='./bus\x00')

04:05:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x8, [], "d9e34739861a6174817d0f2355658869"})
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:07 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000001c0)={@local, 0x37})
clock_getres(0x3, &(0x7f0000000200))
r5 = socket$inet(0x2, 0x6, 0x80)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/83)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
socket$vsock_dgram(0x28, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1d00})

04:05:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000400)='./bus\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x4}, {&(0x7f0000000240)="13bc8bb9de44cd7a206ff48c0df0dfaa7ef07a53391bd39f856f52cd53aeb24a65b22f0e012df3377c339ab5319ceecbb42a47643a11aa0b8a8b73932f5e5037e4db", 0x42, 0x6}], 0xa5847b873978181f, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x126}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4014000}, 0x4044015)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000000)={0x8, 'syzkaller0\x00', {'rose0\x00'}, 0x4000})
fchdir(r2)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r4, 0x8200)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x401, 0x0)

04:05:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./bus/file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2000000000000010, 0x3, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r6, @ANYBLOB="8014d350d222f2"], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newlink={0x64, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x206, 0x10000}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x64}}, 0x0)
r7 = fsmount(r0, 0x0, 0x9)
fadvise64(r7, 0x1, 0x0, 0x5)
ftruncate(r1, 0x8200)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), 0x4)

[ 2174.519196][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.536040][T31700] FAT-fs (loop4): Filesystem has been set read-only
[ 2174.543782][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.553641][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.563731][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.573585][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.583089][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.594121][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.611119][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.621017][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2174.630160][T31700] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:07 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x80000, 0x0)
ioctl$TIOCGICOUNT(r1, 0x545d, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x10}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x20)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400000, 0x0)
symlinkat(&(0x7f0000000040)='./file0/file0\x00', r4, &(0x7f0000000180)='./bus\x00')
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000005304060000000000000000000000000a140000001100010000000b00000000000000000a5c81d4634d05ec17cb8f5640e8b76a5d0621e207000000d16ad2a1705563865ad01ea940e3f51934d8fb"], 0x28}}, 0x0)
ftruncate(r6, 0x8200)
r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r12 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r13 = dup2(r12, r11)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r13)
accept4$inet(r13, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10, 0x0)
r14 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r15 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r16 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r17 = dup2(r16, r15)
ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r17)
write$FUSE_INTERRUPT(r17, &(0x7f0000000340)={0x10, 0x0, 0x5}, 0x10)
r18 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r18)
ioctl$EVIOCGID(r18, 0x80084502, &(0x7f0000000a00)=""/4096)
write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0x9)

04:05:07 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270f7f8", 0xef}], 0x284001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x2)
fchdir(r0)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x101, 0x0, 0x1000}, 0x4)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

04:05:07 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x8000}]})
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x23)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r6=>r5, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)='bdev}[security*\x00'}, 0x30)
sched_setattr(r6, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8, 0x53, 0x4, 0x3, 0x0, 0x3, 0x2}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4f20, 0x0, @mcast1}, 0x1c)

04:05:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "ffb1dda7d93aee16", "1f9825682832cc7e8ecc5d31b318f861f1add92252bbe6856782748a91f6ce29", "f97614c7", "f6b84a4eec2057cb"}, 0x38)
fchdir(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

[ 2174.970220][T31936] FAT-fs (loop4): bogus number of reserved sectors
[ 2174.983551][T31936] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2175.136980][T31936] FAT-fs (loop4): bogus number of reserved sectors
[ 2175.145482][T31936] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2175.219886][T31999] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2175.230385][T31999] FAT-fs (loop1): Filesystem has been set read-only
04:05:08 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffff000, 0x7, 0x0, 0x1, 0xa, 0x0, "0ac8c93c009a353149a0a44edf1b5c007852f15b53222d8d4942aaa0ad000bb13babe846ed25e79ee1d519e9b174102d1c7e4b494b8405851f97622894c0d39c", "3eae093e04d790d9f40c6a4fecfa2236a1182c66dcc7d0a713f8df42bb0337d6dd3de6aaea01e1bf7c85d6212c4bfffa4c6f86f13e2b8f44b55e5cf4f089fbae", "0861faa9e36aae8ab981e5ffa83d8b9822cfb88dedc68d3f30cd70c2d6e5d08e", [0x10000, 0x8]})
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
lgetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f00000001c0)=""/220, 0xdc)

04:05:08 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="b1651d85539b8cbab80f1c9794440712a12642e9648b82fb987c2821411a423c16942f07764d4a8c06116d2413766dae874e74f38545322f7ade04525962032b96be665877826d121905105e71d740eb2c9ba2780477a9b1b07d890b86f5486cf9fe2b0674f97dc366f13f36fcbe8ee0dc9181531554df1e6f856865c19ad28d1c569e25c99730ab394a43e26acca5d93e13db2c23b3a88b890fa51f02f076f1b1d5483332b5c12a87839b5ec68f7d03d27bd349401c32caf7e35a6766351c57849462940996875403142cfb699ff400000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf250e00000005002a000100000008003a0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0xf292056d3a520f83)

04:05:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000005304060000000000000000000000000a140000001100010000000000000000000000000ad9ea57dd147e999726c92fa4b44beeec897ad6593c45dcc4b10cc0dc64b5a47d141c3ff2c37c0a5be8ef0bdac155c9b870595389c6627ed29f425a3100f5843356"], 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = dup2(r10, r9)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11)
r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r13 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r14 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r15 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r16 = dup2(r15, r14)
ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r16)
r17 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r18 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r20 = dup2(r19, r18)
ioctl$PERF_EVENT_IOC_SET_BPF(r17, 0x40042408, r20)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0xac, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r11}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r12}, {0x8, 0x1, r16}, {0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1995}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r20}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000080)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r21 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r21, 0x0)
r22 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r22, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r22, 0x8200)
write$cgroup_type(r22, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1600})

04:05:08 executing program 1:
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./bus\x00', 0x2, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4395e7c947c7b6db696c3d312c73696f72746ef30e653d6d297865622c618d7072616973657c95fdd7ffffffffec14b1cf76555e963519c8778e8aa891ccaabed0e98053622f07857d9088edbf4a93cffdc0349edd48ddbc77ba8bdb4cf107a128d22d2ed1699195df3f9e15849ef1b4f83be6c179a204e70b7e270e68b5e8a6bd1d107c51adcef889a0ebccb680e9241bf9627776c45d83d72900000000000000000000001699762e8411de43164b5075000000000000144785f75402a2d0eac813da4f8dd9a9cb1c8102af9e604b86fd5f50eb9f4f614e758b0c7e27c6845546ba18e709cef6d373b143c9b1d0e41d61e29587a72d41538d4254a31c2758dbe8f77b5d67751d8994f47f3b596c52a340468fd7c3af3a641dd57c0bac2f0f3b828fcf5ac8f088477ed2cb9d590e55250c0a864818a650d3f954"])
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
timerfd_create(0x1, 0x800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r2, 0xb0343aabd1184b87}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

04:05:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1e00})

[ 2175.361727][T32094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=32094 comm=syz-executor.4
[ 2175.391999][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.402745][T32094] FAT-fs (loop4): Filesystem has been set read-only
04:05:08 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='\x00', 0x1, 0x1)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2175.410315][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.419376][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.419801][T32147] FAT-fs (loop1): Unrecognized mount option "C•çÉGǶÛil=1" or missing value
[ 2175.428501][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.445920][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.456782][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.465810][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.474616][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.483427][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.492262][T32094] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2175.636474][T32147] FAT-fs (loop1): Unrecognized mount option "C•çÉGǶÛil=1" or missing value
04:05:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0), 0x280001c, 0x0)
r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x2040, 0x183)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r10 = getpid()
sendmsg$nl_route(r6, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r10}]}, 0x3c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
r12 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = dup(r13)
getsockname$packet(r14, &(0x7f00000000c0)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r16 = getpid()
sendmsg$nl_route(r12, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r16}]}, 0x3c}}, 0x0)
r17 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = dup(r18)
getsockname$packet(r19, &(0x7f00000000c0)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r21 = getpid()
sendmsg$nl_route(r17, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r20}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r21}]}, 0x3c}}, 0x0)
r22 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
r24 = dup(r23)
getsockname$packet(r24, &(0x7f00000000c0)={0x11, 0x0, <r25=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r26 = getpid()
sendmsg$nl_route(r22, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r25}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r26}]}, 0x3c}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8)
r28 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r29=>0xffffffffffffffff})
r30 = dup(r29)
getsockname$packet(r30, &(0x7f00000000c0)={0x11, 0x0, <r31=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r32 = getpid()
sendmsg$nl_route(r28, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r31}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r32}]}, 0x3c}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000032c0)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r33=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000033c0)=0xe8)
r34 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r35=>0xffffffffffffffff})
r36 = dup(r35)
getsockname$packet(r36, &(0x7f00000000c0)={0x11, 0x0, <r37=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r38 = getpid()
sendmsg$nl_route(r34, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r37}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r38}]}, 0x3c}}, 0x0)
r39 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r40 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r41 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r42 = dup2(r41, r40)
ioctl$PERF_EVENT_IOC_SET_BPF(r39, 0x40042408, r42)
getsockname$packet(r42, &(0x7f0000003400)={0x11, 0x0, <r43=>0x0}, &(0x7f0000003440)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000003480)={0x11, 0x0, <r44=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000034c0)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000039c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003980)={&(0x7f0000003500)={0x474, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x9, 0x9, 0x6, 0x37}, {0x6, 0x1, 0x5, 0x8001}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x240, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x5, 0x81, 0x80, 0xc9}, {0x1f, 0x98, 0x8, 0x2b8}, {0xb9e3, 0x2, 0xd5, 0x100000}, {0xc2, 0x80, 0x3, 0xed}, {0x1000, 0x3, 0xfd, 0x9}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r27}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r31}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r37}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r43}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r44}}}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0xc0c1}, 0x48054)
r45 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r45, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r45, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r45, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r45, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r45, 0x0, 0x0, 0x40054, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={[], [], @rand_addr=0x8}}, 0x1c)

04:05:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x10}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2})
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x0, 0x1, 0x8, 0x0, 0xaa8}})
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
write$nbd(r5, &(0x7f0000000100)={0x67446698, 0x0, 0x0, 0x2, 0x1}, 0x10)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r6, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10)
write$UHID_GET_REPORT_REPLY(r10, &(0x7f0000000180)={0xa, {0x8, 0x0, 0xc6}}, 0xa)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x100)
setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000240)={0x5, 0x0, 0x9, 0x20, 0x7e}, 0xc)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2175.717805][T32229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=32229 comm=syz-executor.4
[ 2175.781169][T32233] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=32233 comm=syz-executor.0
04:05:08 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffff7, 0x3, &(0x7f0000000240)=[{&(0x7f00000000c0)="f94311ccffadf8a27eafc24fabb9ea079f2303fd5d6d015be688c72dce6f4cc7369cb32fb8ccedabd05f9f2d5579c83ee15c3eec98702ec69817b1ce8dc919ac182982b2cfa91a28b9928c2820e0f56b91e9fb12ea277f480f0f2060a2b47701e630ac626612b942", 0x68, 0x1}, {&(0x7f0000000140)="4ba3a95b2250b1f7f0294593bb30a469e1d08c9e02cf401434b46908f4ad1984b8ada968b2c823303027a0c5b280e66179a9c7e68bef36220042004854eb1394b40da640bf11d08243f1dd8cb7ef4dcf63bfee49af77d37569efa9b83d1320aa15dce020d0ebf78eaaaa3bbd6bab17368d4afa9322224f9723c329a6805f8b5d6311085e6530ecfd07aa6672d449465532b590c2cb9a8e882086f6511761e9b2d3dbc9e9133f5bed989e4637a5837c33c9f327e61bbb1a418559f8b8c65ede992c9818270505e3c6764f67f87f9f8add4d2dc0c810a58da90b6db9e98906091169b6e0f2beb26a", 0xe7, 0x47b}, {&(0x7f0000001480)="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", 0x1031, 0x6}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2175.957781][T32342] FAT-fs (loop1): bogus number of reserved sectors
[ 2175.968184][T32344] FAT-fs (loop4): bogus number of FAT structure
[ 2175.972056][T32342] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2175.980462][T32344] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1700})

04:05:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00')
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x1984, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c44661fc7d7b394c069a68d785f3b43e8ccd736184a35d24cbd712c137390fd9"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a000b664524a5f98b9e837d172841c0c38abeebe9dc962c0d0420aff13ea4a27"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0xdc8, 0x8, 0x0, 0x1, [{0x3b4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ef8d7bcded6a423ee54d2d319cd1377e8bb73bc28d4e788b57bc208c3ac69ff3"}, @WGPEER_A_ALLOWEDIPS={0x324, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="e8acba7ee74de7f7584edee630215bdf"}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x5c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="31c215a065190c589a025fb8fb54904e"}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="d88f1d8eef2c72feca4f2e63f37409ea"}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @rand_addr=0x20}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x36}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x1000}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @remote, 0xfff}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @mcast2, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000000, @remote, 0x3ff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x4d8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x424, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1c}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="2a7829515de995ff7de20cd2d69fa9a8"}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3d}}, {0x5}}]}, {0x4}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x838b}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x1d}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "edfcc814019cac21dc97d5db5745e0331c624ae7fa5bbc11104d8e033547e2f3"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c855516d7c77d121a3883aec95e21319bccbf4c2e4b5dabdb783f6379ade696e"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6dbb3ed0e78a6765ecca4669bac757996bd99561102d2e66129fe7ffe279a44b"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x40, @remote, 0x21f52ec3}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8, 0x3, 0xc}]}, {0x138, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @empty, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ec9fadd76b9c24f1b4d6e5df91f048421bd4cba0d6e5bac9bfa62dbf993dffd"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xf04, @dev={0xfe, 0x80, [], 0x30}, 0x31c9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000001, @local, 0x7fff}}]}, {0x35c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x32c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xa}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="39f3f2006294e8438a8fe41e141d0d19"}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="601d27156128c87ab570b3296360f4e5"}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x44}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="e095db893b6e261a6888734888954698"}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @ipv4={[], [], @empty}, 0x7}}]}]}, @WGDEVICE_A_PEERS={0xa84, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @rand_addr="3d365c5e23eb42639fc746fb614e6c0f", 0x20}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}]}, {0x220, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xc9, @remote, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="366f96c8eeeb6e683525ab5b6ff9f8ea"}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x3f}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8a7c677c9c7c7c3fcb0aefa20b54327a2aa470b5b465e9dbf2f9c2b332ee3318"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}, {0x5ac, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7933ccef1df2a20c3cd5293493dca6365182d0bc47d18f848bf3586a7e1b3432"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x2a8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0xa7}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="66ab0253dd34465d4a63717b89414ed9"}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xf}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x41}}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0xfffffff9}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="e41318354afd15214a379c11e8ca06a8"}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x7, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x294, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x6d, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x18}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x24}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x250, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="54864dd7100e5d245b2698e624496567"}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0xfff}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}]}, 0x1984}, 0x1, 0x0, 0x0, 0x4004010}, 0x8880)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

[ 2176.078270][T32354] FAT-fs (loop3): invalid media value (0x28)
[ 2176.088358][T32354] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2176.104555][T32342] FAT-fs (loop1): bogus number of reserved sectors
[ 2176.112083][T32342] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2176.176344][T32344] FAT-fs (loop4): bogus number of FAT structure
[ 2176.184363][T32344] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1f00})

04:05:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c000100003be213c87ab1d8f42cb5f29069d20e00000000000100000906000b000200000006000b000100001006000b000000000020bf0296c4941b38c5e7b23fa6f4a97313fb8f0ea675a92daa8400db3c439deba6977146bc4b543384f13f18b774248ab98242f8969cffa466a418bc780aa5a180bf9dd33227a95b3d6e944e433c9a0b972c05b6e08df0c93d1ba8f907c6b5857d4779698190ec7b13490c72587e58ee09bc57cd154a14f83915a24d54ed99c54f8606d85b9bb80a47a197071712086779efe6acd645274d5fdd0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8)
chown(&(0x7f0000000340)='./bus\x00', r2, 0xee00)
ftruncate(r1, 0x8200)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x400000, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c5)

04:05:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000340)={{0x5e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'sh\x00', 0x20, 0xffff, 0x2d}, {@rand_addr=0x1, 0x4e21, 0x0, 0x6, 0xdf5b, 0x800}}, 0x44)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x28}, 0x10)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000180)=0x4)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="14d9e4c872b88cab517d5500000000f300000a140000001100e70000000524daa6c09dbf8b9f4f2ead7a2b0add1c44df5ec7dd853ec176f1fb5b46fe984dddf6d54112a26bc819a57f71df127f5448de7bd9c7ecf0f77072bb1e408a0dbc89b507f995b486becf8c6610349d86b2e54c7a52d0907a83146c4514090b22a137d2247268ba39d2ae6c19e942cb4c4fd3c182acb1c3c90802cd06a61e06b7ae90d0496914c2167be17899d59cffef453c07fb318c302d1a"], 0x28}}, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000007c0)=<r6=>0x0)
setpriority(0x2, r6, 0x852)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r10 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r9)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r10)
keyctl$chown(0x4, r11, 0x0, r8)
syz_mount_image$tmpfs(&(0x7f0000000480)='tmpfs\x00', &(0x7f00000004c0)='./bus\x00', 0x0, 0x2, &(0x7f0000000640)=[{&(0x7f0000000500)="ecaf3827deb7587f538f9fdc17c0021eae2c3d2f73847f59d8046ba082face00ea787febe2b3e96ce8681dc1e8296d9d10021d3d0158445603fa83dbf6f6c2333fecda1c79fa4ed1f6043b1ac7c257dfdf22fca8caacbe6eb9203ac86a8cf2b5401790bc4ad12f4380af902b222bf1d0028f90bb9d2629e828b16256bcb85c9d812c9e4ff212595845587bc10591e082bdea280bc9828a76088c8ef047d490fda1", 0xa1, 0x8000}, {&(0x7f00000005c0)="42acf99bc77bc1dcdce84bfa02d2c702146f1788f841c7ef14d0848c15cdc77fe2b1332a4d2a938f33ef4f584f45f36aeeb10499b595088eefdf8331272831892ded9799af7acc82993f17fe873c2903ed8bfd25b60fb7a83ca6", 0x5a, 0x1f}], 0x42, &(0x7f0000000680)={[{@huge_advise={'huge=advise', 0x3d, 'vfat\x00'}}, {@nr_blocks={'nr_blocks', 0x3d, [0x7f, 0x36, 0x74, 0x6d]}}, {@nr_blocks={'nr_blocks', 0x3d, [0xc, 0x78, 0x6d, 0x6b, 0x35, 0x78, 0x35]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x36, 0x35, 0x39, 0x0, 0x74, 0x0, 0x30, 0x25, 0x70]}}, {@gid={'gid', 0x3d, r8}}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x32, 0x32, 0x3a]}}}}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'em0posix_acl_accesseth1mime_type)em1$ppp1'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, 'vmnet0bdev*wlan0^%'}}, {@obj_role={'obj_role', 0x3d, 'eth0'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]})
ftruncate(r4, 0x8200)
nanosleep(&(0x7f0000000240)={0x77359400}, 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2176.371683][   T22] kauditd_printk_skb: 23 callbacks suppressed
[ 2176.371689][   T22] audit: type=1107 audit(2000001909.312:10407): pid=32474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2176.405326][T32485] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2176.415520][T32485] FAT-fs (loop1): Filesystem has been set read-only
04:05:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400600, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005308060000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0)
close(r1)
fchdir(r0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r6, 0x8200)

04:05:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x3, &(0x7f0000000140)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {&(0x7f0000000040)="5a53099bed5c61d9092eb0ddf51c314999c9129a2edfe36403bb5d6c3d38617b49e41c757863f03a83b51e9e661f1c", 0x2f, 0x1}, {&(0x7f00000000c0)="d95f5969271b97053a42f0e29c03c543e67010a48159e180456aa63f68539867141274b90900e7960c9da09b8a4b984a877e7a9316b9c70ddfabec3af322a67d4423488e08f8ef797e1474d830ec8f44a26cb7ba84c787a52836819db5a01352c3095e9aa65bdbaffc3c6fc33f78d476982a5433c6", 0x75, 0x6}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
execveat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='+\x00', &(0x7f0000000280)='vfat\x00'], &(0x7f00000003c0)=[&(0x7f0000000380)='vfat\x00'], 0x800)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0xc0)
ftruncate(r1, 0x8200)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1e, 0x4)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x10)
close(r2)

[ 2176.508602][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2176.517542][T32597] FAT-fs (loop4): Filesystem has been set read-only
[ 2176.524925][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2176.533919][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2176.591026][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2176.653031][   T22] audit: type=1107 audit(2000001909.592:10408): pid=32232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2176.653150][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2176.744281][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, [], [{0xc41, 0xdf, 0x8, 0x0, 0x0, 0x5}, {0x0, 0x4, 0x1, 0xfe, 0xffffffffffffffe1, 0x62d}], [[], [], []]})
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x453, 0x6}, [@NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5dd306bef9e2215f, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}}, 0x20000000)
ftruncate(r1, 0x8203)

04:05:09 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x0, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2176.795772][T32609] FAT-fs (loop3): invalid media value (0x43)
[ 2176.802107][T32609] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2176.811987][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2176.821147][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2176.830633][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2176.840562][T32597] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:09 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)

[ 2176.866256][   T22] audit: type=1107 audit(2000001909.812:10409): pid=32615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2176.883692][   T22] audit: type=1107 audit(2000001909.832:10410): pid=32615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2176.906619][T32609] FAT-fs (loop3): invalid media value (0x43)
04:05:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1800})

[ 2176.922430][T32609] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x101ed000)
write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0xfa, 0xff, 0x0, 0x0, 0xa4b2, 0x0, 0x6, 0x8, 0x1ae, 0x38, 0x1d, 0x2, 0x4, 0x20, 0x1, 0x634, 0x6, 0x6}, [{0x3, 0x8, 0x6, 0x95e7, 0x7, 0xff, 0x3, 0x7}, {0x60000000, 0x810, 0xffff, 0xffffffa8, 0x0, 0x5, 0x1, 0x3}], "49db18fac8b772b15c193ddb06216b243208f953a93cf4c79520d43dcd6f117b9ad8e7fe4f4f363039", [[], [], [], [], [], [], []]}, 0x7a1)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)

04:05:10 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@routing={0x88, 0x2, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}, 0x18)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local}, 0xfffffd99)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2)
ioprio_get$uid(0x3, r2)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2176.975981][   T22] audit: type=1107 audit(2000001909.922:10411): pid=32621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2176.983873][T32622] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2177.007671][T32622] FAT-fs (loop1): Filesystem has been set read-only
[ 2177.128306][   T22] audit: type=1107 audit(2000001910.072:10412): pid=32740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2000})

04:05:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
fchdir(0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x800)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="200025bd7000ffccdf250900000060d1b57a1e7ac5f406d11d59d5cb3e7d6bf561ff15d97f56ee78a17bcfe6574fedc18c1ca1b4db4623337fc7e7370f1178792932c115b54f92e7597e69f69a625fb021f03beb19082a8566d57d7f6c7dd8e387faf1fd6d7a38d64837f736ebd0a9e48cf34658e242eb19c33572f84b0d1ce9b902290fd5e4a56d92730d4f5486b006944607d50eac037646ff657f196a1e5bb7e0e1a86d5a9eb26280c6ee0f936745d471a9872039b33bc3c62ed5b59068fc3f3ddb11583f6f8389ecae5decc2c0cbb17faa3deb2697e111ac38537afc5f6e80132316818617a46a2e47300d"], 0x14}, 0x1, 0x0, 0x0, 0x2000c885}, 0x10)

[ 2177.194272][   T22] audit: type=1107 audit(2000001910.132:10413): pid=32740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2177.210696][T32748] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2177.231023][T32748] FAT-fs (loop1): Filesystem has been set read-only
04:05:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000240)=@can, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f0000000180)=""/44, 0x2c}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f00000005c0)=""/229, 0xe5}], 0x5, &(0x7f0000000a00)=""/4096, 0x1000}, 0x40002140)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
ptrace$getregs(0xe, r3, 0x20, &(0x7f0000001a00)=""/4096)
r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000480)="61c4ee56b55d1924a27fdb48243e521c0f6f14ab5c786d1a28749b52aa6bca79a26c67a19110cc993bad6e45a132aa6dd75484f80f65979a5df58de89c4849939a7024d0e4cf877b8b6829506c5e45953882b5283dcff8daba5221fa8ff3a0d691641acbae67b6f09ac1594eb56e3ac1453400d8ad30ea6a42e114afaaf9b3c23779fc361c65aec5d475e5cd7b69cf051626e83bdc5254bd11a8e7b45bb0afa2810dc63391983f8b83fb2816e743f7f467148bf6552a8143a323f7f91861831bbd3902f860e320954699bd4415656fb7249e616afdd07fc72e72e90815cb60343645bb", 0xe3)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0x1, 0x80)
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000780)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000880)=0xe8)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x424501, 0x3a)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000))
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:10 executing program 1:
r0 = open(&(0x7f0000000300)='./file1\x00', 0x2c0000, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000040))

04:05:10 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1900})

[ 2177.796340][  T316] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2177.814520][  T316] FAT-fs (loop1): Filesystem has been set read-only
[ 2177.995112][   T22] audit: type=1107 audit(2000001910.932:10414): pid=304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fchdir(0xffffffffffffffff)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmmsg$sock(r4, &(0x7f00000021c0)=[{{&(0x7f00000000c0)=@generic={0x9, "33b476be5a0d4ad7d9917c6d553e1eacfbf3d1b149ec48ef3fcdd4f0b4cab7112d5b3b7303e44b43d05222b5618f67b8e5ae1ef9c66c511c730f520dcb4e87a7dcc99e0bdd8e5af1d06966f482bb0ec4be48bc0a330682a219a19c01cd0bbf3bb6049626c8f67710d5e3be73f618cd0f6472c21a01fe729992fe692d9ef9"}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="e79c1fdac32e6570c4326689a63483e13ed899f330487e3a3853f785caecc5ef45e9160f9e6fab3b085c28172b0a3cb839ae109a60071404f7b3318e2f2c7e7f1ff8d13a4aad423727d2751d48d307135b427b862d10d1cba929d2a0dfe60a64581520b7e7622fced4a489c9bb5d90a8890d22b63aeed3792f9abd1c90fb93627b474dfb52c5f1b05eba9e7f96d9399ee75f2032646de49fd5fdd266714f41a467a05ab198410114bd1de7f66ec408a1a538e1a03a41d6", 0xb7}, {&(0x7f0000000480)="3df6d2ed9920cccdb9d6ed363ad9ab243a75426e3f674e67eb800ff4a9dcc4a4fcf759622f2a913b5e4950ad683b0ebb497377d9bd713872a6cd6645a6dc60c0f71a69ef78d310f0d069ccc203a09aff1f2a0b7c20a3dbb32ae533185544cc0aa4166544de999914a4532c0bf6f88780c930b7801492b6031da3d56d878e7bd13f718a115c2804ff826b0dd24dd0894a241c2afa28b8658c1fd328dafd69df45666dddebe930cf575996f0ada63810cb96f0b0323ce10d05e877b3287a50554f372a96ff75ad00e0b69dcee3c1bb0b608ff558e905d2e4c6fe584d31f92c4bc421b3efa73a8372fcce60bfe0843d3831d987a4efb68e26f4", 0xf8}], 0x2, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0xed67}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xec}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="4d33e0747d844e881d8258f0d9735aa0d31430751dbee99db9675c3ef027b000170e71997d42ecdcdb14116be987c707d41a2c80690d1bb69c7e49c7881869d4ae00e8cc9f96466dcda7f7c5934004e7bb173b5bac7a2d79b82bfa84949e4fd5fcd4762903721bfe0b3b7b6e823a9a66d1b110558467e2018d4bc29c45cf0ca261cd2709684a8ade6fe7de8b075160dc752182ca241587e75f6482ac7e666335d3b7ae5c107a16a4e3e8b86f3cefbf22d76824cab6004805906820fec0e16a87f7bb96c5ed83fc7091ac2d670ad2b96eae530ea347abbcf453eb3394495a0b9f666c7b0ad2533ccdf078572f80d0a6cc3489", 0xf2}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x48}}, {{&(0x7f0000000740)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000007c0)="ce2e1c8f89313f76d7cfe21ea974ba6856bef82a73b82a557be6f99e9a37db3f53532f2316b5c035a65fc935473c68946ce91c105f7943eec47f72cb03d991242be8e7f4d509b6b30f06b8dea42d4fad017ae1721f958bba7caf073e4ed0e467fa6c3ede02acd67b8ead461687748cc37f6a9afa56d218cc405b355080fa663cad", 0x81}, {&(0x7f0000000880)="d5676f5f553808e1f108d886e7c7eaf46eede054eceff17492fbbcaedf7c88e9f2b37103935819b94a90ceb1e989292303f94866642ebf5570288aed1f8374a916cabcf9fefa83ebaa8f61138cbf5fe56fa34183cc74f10b15136c5bc16f21208eab84b7be76298fd2076d88a1c9caea29e3844899a70c35686607c82c424df6b47c7878ec8c0d25aec3188e5560523aef7af2d0c619", 0x96}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000240)="17fa46c061c9d14157f879249d5e5099dd2f2064b3719ecdc28c66a310f3565f09379972e628576989053700a29b78f6054c80e48a6fb3d8a20f525004dc89d6", 0x40}, {&(0x7f0000001940)="862fd603c2b9e690adf4c484c426f33aa57488cf8a46e7fadfa2302478da", 0x1e}, {&(0x7f0000001980)="09ed0cc15bf8f157eb8bbea2e8245c84f0d99cdd3e97d7a0b2f5615ea4ae9323e7c30acf37560c619435bd30e3de1b4fb1a06d232183", 0x36}, {&(0x7f00000019c0)="c2c8920e3c13fc643114c21a0d99f7b84fe38173c8e45338dfec07d9afd8aa5a44efb502ef5c24060856ad0577967b83468d9f6d00b489383dce45b1277853def4399c39fd1e78d4cb9bfab81f0a106c185ac7da0a2b1bc6d312b55b670ed906b9bc959f4a5bb71920c114d0bb684f769b1925459dbed207ca867ca3aee2c5462d09c85e042a3fef08", 0x89}, {&(0x7f0000001a80)="314c9c6b1a42b9b7be37f6b4f6f6b790933eed3292887042fa1a100fcd644623b82fdda5b62d4f4f63082a250d1674692f2a9f4ba3faeb023a95530493601e0063beda350fe027b685cfe3ed89b8e515100b22367a1f703e9701e18c1674b31aef3887758bb7da787ff8b7e443b4bf8df272e6dc7aa1c937583af9d0c4a7e2a59b3a12657022c1463d86f06111", 0x8d}], 0x8, &(0x7f0000001bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)="b49aea4650add1764c7200f6ff973233dcac4963034cdda20eed5dd7e88438c73b14ffffd4764f92d727dd7d1cdcf454a394e9e42f85979242b6183740b37cbd049ac867d6ee82757c73e0ae3ce74772fe9f6616b0a6ffacf8085bd818", 0x5d}, {&(0x7f0000001cc0)="241cf5236aaa5f914bdcf1c549f4e66deebe0ccac66caab5f2bd0f4c567be9b4f6444996236af4f74f6e6de353c7fe9b3dd81a239e49c4a36122ab6706cfcd8c6ee95e4ff7b50c44", 0x48}], 0x2, &(0x7f0000001d80)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{&(0x7f0000001e00)=@x25={0x9, @null='               \x00'}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e80)="06288ee8056ea51ea067ab603fc7bc72fdae82a04feec99f7add438ae9fda6547490de6ed2744db1d735231f942497bbccc9d3dda8fb950d2274c6f55b87872085d8040691cab646dad18f3e8e98780596024d3f996ef61b9b8859fbc5ebe85c60677df26428fbf7cea0d41b48afdce3530d563b9ab0d6b5277621e409a5834508368eee3f482daeb2c4fa0a5c719a7cf00e2b51ba2d", 0x96}], 0x1, &(0x7f0000001f80)=[@timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x4604}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}], 0x78}}, {{&(0x7f0000002000)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002080)="9ccd1603da3be208682a347a74f21d4fa89af407639bdc45628e51057dee54f80372ea104625a79645abac02fb83d5293a4340461fb31fd7d08b59b48512d0f34be5f2904eb1b766c12c36a55c6e9dcfbdeb0ba54c410252c50142e2be4f518879b0ec24b19f82753761199653e78559d40eb0428fd3bb99", 0x78}], 0x1, &(0x7f0000002140)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0xac3}}], 0x78}}], 0x6, 0x800)

[ 2178.110298][   T22] audit: type=1107 audit(2000001911.052:10415): pid=334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:11 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2001})

04:05:11 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2178.159160][   T22] audit: type=1107 audit(2000001911.052:10416): pid=334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffa, 0x3, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1e8, 0x2003}, {&(0x7f0000000680)="b51dafb33da1e4b8238ab4c5bb5e90dd9c5b5a29eeaa4e5dfc76fb5c9169e1dba9d597c5a79069e5f6974c7ec11a378a247c6697cda320037726dcd08668d0c621b96d5ee97e8af3f40d8c3287cf49e35876705a134ff420cf564ce6dd53405e5859d24151eae9d460dd904c8ede3c0c4cf6c665b90936f07bdf2c1da2f14bac61bb986423c79193d80f6f950a", 0x8d, 0xffff}, {&(0x7f0000000740)="9bd6657517cb3a63ebc46a540a0dbdac33d635fd45ea7dc77120baabba146c33a69f9bf81922f4ec5f12b05c9055a28e0bc14e8e61552a5f47d69a6ae3d820eb994db0122eeb39267ab0489be1760eaf552e3dfeedd3dcb72c247cc86dc1f8e2ae68895aa77c071343cc47493b764a4dc36fe2f3f1184093b5b5b1049df92e55a6fe613d3e12b11a50243714394ee0e12a60fcb7b1fc35363519918b3935c4493580c583ce0fc857fb2ae4322f6a43e07f1fd8d6209969df44d1d101ceeb90e4e4efb9eb6172e3e746c96a28e0766571762c5a64", 0xd4, 0x99fb}], 0x280003a, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x9)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f00000002c0)={[0x80]}, 0x8)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ftruncate(r1, 0x7196)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)=0xffffff01)

04:05:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
getresuid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100), &(0x7f0000000180))
chown(&(0x7f0000000000)='./bus\x00', r1, 0xee00)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:11 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = socket$inet(0x2, 0x80000, 0x1)
clock_gettime(0x0, &(0x7f0000005b40)={<r2=>0x0, <r3=>0x0})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000002c0)={0x1, [0x0]})
recvmmsg(r1, &(0x7f00000058c0)=[{{&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000340)=""/172, 0xac}, {&(0x7f0000000400)=""/69, 0x45}], 0x5, &(0x7f0000000500)=""/122, 0x7a}, 0x100}, {{&(0x7f0000000580)=@un=@abs, 0x80, &(0x7f0000001980)=[{&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/111, 0x6f}, {&(0x7f00000002c0)}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/17, 0x11}, {&(0x7f00000018c0)=""/158, 0x9e}], 0x7, &(0x7f0000001a00)=""/181, 0xb5}, 0x50}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001ac0)=""/116, 0x74}, {&(0x7f0000001b40)=""/15, 0xf}], 0x2, &(0x7f0000001bc0)=""/8, 0x8}, 0x9}, {{&(0x7f0000001c00)=@can, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/173, 0xad}], 0x2}, 0x6}, {{&(0x7f0000002d80)=@ax25={{0x3, @bcast}, [@netrom, @netrom, @netrom, @null, @netrom, @netrom, @netrom]}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002e00)=""/254, 0xfe}, {&(0x7f0000002f00)=""/252, 0xfc}, {&(0x7f0000003000)=""/62, 0x3e}, {&(0x7f0000003040)=""/203, 0xcb}, {&(0x7f0000003140)=""/179, 0xb3}, {&(0x7f0000003200)=""/123, 0x7b}, {&(0x7f0000003280)=""/110, 0x6e}], 0x7, &(0x7f0000003380)=""/126, 0x7e}, 0x7ff}, {{&(0x7f0000003400)=@ax25={{0x3, @default}, [@netrom, @bcast, @bcast, @remote, @rose, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003480)=""/18, 0x12}, {&(0x7f00000034c0)=""/28, 0x1c}, {&(0x7f0000003500)=""/69, 0x45}, {&(0x7f0000003580)=""/185, 0xb9}, {&(0x7f0000003640)=""/144, 0x90}, {&(0x7f0000003700)=""/192, 0xc0}, {&(0x7f00000037c0)=""/156, 0x9c}, {&(0x7f0000003880)=""/93, 0x5d}], 0x8, &(0x7f0000003980)=""/145, 0x91}, 0x2}, {{&(0x7f0000003a40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003ac0)=""/72, 0x48}, {&(0x7f0000003b40)=""/42, 0x2a}, {&(0x7f0000003b80)=""/58, 0x3a}, {&(0x7f0000003bc0)=""/198, 0xc6}, {&(0x7f0000003cc0)=""/169, 0xa9}, {&(0x7f0000003d80)}, {&(0x7f0000003dc0)=""/242, 0xf2}], 0x7, &(0x7f0000003f40)=""/192, 0xc0}, 0x4}, {{&(0x7f0000004000)=@tipc, 0x80, &(0x7f0000005280)=[{&(0x7f0000004080)=""/73, 0x49}, {&(0x7f0000004100)=""/6, 0x6}, {&(0x7f0000004140)=""/139, 0x8b}, {&(0x7f0000004200)=""/88, 0x58}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x5, &(0x7f0000005300)=""/221, 0xdd}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000005400)=""/194, 0xc2}], 0x1, &(0x7f0000005540)=""/238, 0xee}, 0xffff}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005640)=""/96, 0x60}, {&(0x7f00000056c0)=""/182, 0xb6}, {&(0x7f0000005780)=""/33, 0x21}], 0x3, &(0x7f0000005800)=""/186, 0xba}, 0x1}], 0xa, 0x2040, &(0x7f0000005b80)={r2, r3+30000000})

04:05:11 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1a00})

[ 2178.659126][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2178.668645][  T364] FAT-fs (loop4): Filesystem has been set read-only
[ 2178.675703][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2178.685508][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2178.696054][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2178.705501][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2178.715219][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2178.725232][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2178.734330][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2178.743676][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:11 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r1=>0x0)
prlimit64(r1, 0xa, 0x0, &(0x7f0000000280))
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00')
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
getpeername$packet(r7, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r12 = getpid()
sendmsg$nl_route(r8, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r12}]}, 0x3c}}, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000001680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x14, r3, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24004845)
r13 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r13)
r14 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r14, 0x8200)
r15 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r15)
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, r15)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x1d, 0x4, @thr={&(0x7f00000000c0)="1f58de917cf1a9cae1f80f0e6f1cc14931bcb337de914e97915b13b7ec575d1b6e04b8c6c51ff824dff8f6370d11e11c16205297c24bd84481a562f191d7b540a2f9901c39965e715740d39ea833b594b433c6c9c2fc0780988ce975c7943297faee2e0fefdfe3811eac13f989a1dce698a3452496fcbdbec61c30cafea18d9a7cba235660d4319c7832abcbeb4ff5e191f264cf3406e89924c9adc9e11587747facc075ff65247a8d320c1dfdb7905d18445a1383d53a43cfacff84f4bbeccf7922dca52e656068461df7066d221ec3384243e0211e5b3258d353957de46f33d26c", &(0x7f0000000480)="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"}}, &(0x7f0000000040))
accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x100000)

04:05:11 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
clock_gettime(0x3, &(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x94)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2178.753417][  T364] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:11 executing program 3:
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
dup3(r1, r0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

04:05:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x23)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe90caecc9583e033}, r5, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = dup2(r10, r9)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11)
r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
accept4$tipc(r12, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:11 executing program 0:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x40042, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@dev]})
ftruncate(r1, 0x8200)

04:05:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2100})

04:05:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000180)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:12 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ftruncate(r1, 0x8200)

04:05:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304060000000000000000000000000a140000001100010000000000000000000000000aec3d4c05f8a194d78bb48ea1f7a90c0bd617b926d04e5d9c258affa603305a9f166c9b42547b3e6573ff156f13110ca0180bb2e47cd76cfe611135f0123623693a6dec0464b4e6db0a210925dfe4aa391ec6c15549c8ed6f620b7b543a038970"], 0x28}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$nl_route_sched(r3, 0xfffffffffffffffe, 0x14)
dup3(r1, r2, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x61)
ftruncate(r4, 0x8200)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@dev={[], 0x1c}, @random="819665dd21b8", @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@canfd={0xd, {{0x0, 0x1}, 0x3c, 0x3, 0x0, 0x0, "9337836e160eda8a97b4d700672526f4b6a48778ad5b1530b3e84ef542a3a45325382f6f4aca8c2f78f452df6a3767a7b3d1a035e127a2deb0ac70f06b99cdc3"}}}}, &(0x7f0000000140)={0x1, 0x2, [0xfaf, 0x7dc, 0x56, 0xd18]})

[ 2179.246548][  T743] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2179.251862][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.256073][  T743] FAT-fs (loop1): Filesystem has been set read-only
[ 2179.264513][  T728] FAT-fs (loop4): Filesystem has been set read-only
[ 2179.283666][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.294248][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.303085][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.311912][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.321657][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.331950][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.341303][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.350235][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.359091][  T728] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:12 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1b00})

04:05:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000007060108000000000000000005b4f28472c8505d000001050001000700000005000100070000000800064000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x4024}, 0x20000010)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x88)
ftruncate(r1, 0x8200)

04:05:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000000c0)={{0x2, 0x0, @identifier="e92c96b58bb9a571cea5391e0e292795"}, 0x40, [], "cc8b312b96eb7fa574bbbeb3e85b8efc55437e82d05512efba1fcf79c0c03c8e460c484adb5a1e0709c1ed15154530e9e34b8413a7a7ade12036d73af2005a0d"})

04:05:12 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1d1004080040030000000000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000fe80000000000000000000000000003f0000000000000000e50000000000000100000000000000000000ffffe0000001"], 0x88)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v2={0x3, 0x2, 0x13, 0x7, 0xe6, "e48cf07006783280031f884afd02b5c439dc38a9f1859498170da7d82bcec1723d27f6ac289e86856a58fc031e8876d026cccd0b09a3e9fa91723685b04007063e5e628250bf020f807933eba0e4cfcd3126f94ac89f3d0b27e62faa596fd801c7602b05335cf945be78f7a3f80c20a4373e78c6059cd9372397312cc3322d16fffd1ea9e420afae26f78927d5861e815f428e261ae98b299f2e7a8f74ab3e69ae3892251c21f257d4008e07abc1905718c4ea587f49bb0b67f8952c07caffe426da57cc09d1f7559f18b54e11a7a5aef0627af75fa4cb1a664fe9768e101335fc3fbb13f8c3"}, 0xef, 0x2)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000200)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x3)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x1)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xa4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="e000000000020102000000000000000002000009060007400003000008000b00736970005b000b00736970000f000600746674702d3230303084ffa8b8ddab997c523000000c00028006000340000200000a000b00512e3933310000008c00028014000180aef40100ac14142808000200ac14144306000340000400002c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000331400018008000100000000080002000000093d2c00018014000300ff01000000000000000000000000000114000400805d7b649ea41b05c82727fb2803748c"], 0xe0}, 0x1, 0x0, 0x0, 0x48b9}, 0xc000)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r5)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r6)
keyctl$chown(0x4, r7, 0x0, r4)
syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000340)='./file1\x00', 0x1, 0x6, &(0x7f0000000840)=[{&(0x7f0000000480)="94260d64b7504cb6d7ed8df9a068ddb62de34a1d62b8703c19be0e0c200fcbdab4967842fa107cb641752902d45e9dc488cc452b49c105b5e83458c361ceb0f3eb03ad07899a4aaef6d2a29ce42176bad856b3733d9845d87ef4ee56adc2e2ded8fb4aff60de214c19615ea3aff231f0f9aae0bb4fb23d22f769143d6bbdf76dccc3720c3a8775693e680142ff602cc0d8660ec1d4411dd8abb05386838795ac2eccc025d4a9423219003e00d7fa50d5f7b608be0efbf939a6299058dae676cefdcd9de9d28c9bbc79277d19", 0xcc, 0x2}, {&(0x7f0000000680)="711d921d6fb0a64a3bc1719784baae2c3d6533b72c586b7057b2e0bb095a6cb2e24a41b8ffc561a2d644fb97bd027500f3c993d83085ff41bd32f37d7614b43fae18ddd24a2ecde19b83394a008d3355fb050a1602b12ef5de4dea2507285e849f07b4084fe181147b38df4690e872519f43c4cfccd0101e83199e3e7954e38a19d0b6360a88ba666447950315818301ecf043", 0x93, 0xf0}, {&(0x7f0000000380)="fa4b035696402c235dfe2abcbaf162e8dbcceaa51788690751f40a5eb25acee2ef5050cb1a618384e358fe39bebf71b2c6026c31a4b55f", 0x37, 0xffffffff}, {&(0x7f0000000740)="76c5294678f25e4e7394c9feaccc", 0xe}, {&(0x7f0000000780)="c2f4566177e5a55a41522cf72b78313c8eee9263e4a123a6c3f8b78056b6814e9d6da531ef62c59223ff251c4b03e3ce709a4947c76db3a15c0708fdd45481286f54b9f9b704ac2a217018dba35bca57429a82", 0x53, 0x8}, {&(0x7f0000000800)="034b41d605ee5b3a126665522b1bf74c28aa1478cd650f40761efc362d9e972b95be837a38e6a3c87d94f25c15c40b1ccf5f0f", 0x33, 0x6}], 0x80000, &(0x7f0000000900)={[{@dots='dots'}, {@nodots='nodots'}, {@fat=@gid={'gid', 0x3d, r4}}, {@dots='dots'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}]})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', {}, 0x20})

04:05:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000000)={0x8001})
ftruncate(r1, 0x8200)

04:05:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
ftruncate(r1, 0x8200)

[ 2179.599069][  T870] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2179.608749][  T870] FAT-fs (loop1): Filesystem has been set read-only
[ 2179.736552][  T983] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2179.738853][  T948] selinux_nlmsg_perm: 4 callbacks suppressed
[ 2179.738862][  T948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=512 sclass=netlink_audit_socket pig=948 comm=syz-executor.4
[ 2179.749123][  T983] FAT-fs (loop1): Filesystem has been set read-only
[ 2179.764828][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.787924][  T948] FAT-fs (loop4): Filesystem has been set read-only
[ 2179.794767][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.806210][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.821783][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.841624][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.850402][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.859339][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.868213][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.876900][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.886467][  T948] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2179.938313][  T948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=512 sclass=netlink_audit_socket pig=948 comm=syz-executor.4
04:05:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0), 0x380001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x1)
ftruncate(r1, 0x8200)

04:05:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x60800, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
pselect6(0x40, &(0x7f0000000000)={0x7, 0x8001, 0x200, 0x4, 0xad, 0x100000001, 0xffff, 0x4}, &(0x7f0000000040)={0x20, 0x7, 0x6, 0x8001, 0x7fffffff, 0x0, 0x3, 0x400}, &(0x7f00000000c0)={0x6, 0x8, 0x10000, 0x89, 0x20, 0xfff, 0x7, 0x8000}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8})
ftruncate(r1, 0x8200)

04:05:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x1ff)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2200})

04:05:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x2)
ftruncate(r1, 0x8200)

[ 2180.054632][ T1107] FAT-fs (loop1): bogus number of reserved sectors
[ 2180.075891][ T1107] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2180.328381][ T1107] FAT-fs (loop1): bogus number of reserved sectors
[ 2180.359101][ T1107] FAT-fs (loop1): Can't find a valid FAT filesystem
04:05:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1c00})

04:05:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/41})
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)

04:05:13 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000080)=""/20, &(0x7f00000000c0)=0x14)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6349756799113b8e66a7140000005304060000000200000000000000000a1400"/50], 0x28}}, 0x0)
r3 = dup2(r2, r1)
unlinkat(r3, &(0x7f0000000000)='.\x00', 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000180)=0x78)
ftruncate(r1, 0x8200)

04:05:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f0000000000)='./bus\x00', 0x169042, 0x9)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:13 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)

04:05:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2180.625446][ T1346] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2180.638332][ T1346] FAT-fs (loop1): Filesystem has been set read-only
[ 2180.652281][ T1353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4505 sclass=netlink_audit_socket pig=1353 comm=syz-executor.3
04:05:13 executing program 3:
r0 = dup(0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffd, 0x0, 0x1, 0x1}}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000001)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5)
syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280041c, 0x0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)
getsockname$netlink(r3, &(0x7f0000000200), &(0x7f0000000240)=0xc)

[ 2180.816856][ T1473] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2180.818680][ T1477] FAT-fs (loop3): bogus number of reserved sectors
[ 2180.831675][ T1473] FAT-fs (loop1): Filesystem has been set read-only
[ 2180.832880][ T1477] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
getsockopt$inet6_buf(r4, 0x29, 0x23, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)

04:05:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2300})

04:05:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2)
syz_mount_image$vfat(&(0x7f0000000340)='vfat\x00', &(0x7f0000000380)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000a00)="b1dbb23c5e592f4426f75244629bec5515bce042e511d101b07b53272e18aa46d1fb2dc9421d02e012dac8c28a8587fde5ffe388b8c1bf8e3c1f6a47d92be05433d715a0cb6abd708c92d66912568e3ac067da99fd3e45cc04e0891ba6e49e6cd807ce19d54ca99e825a6ce19af895e2c72f075ccb931862ea67a8481d6807b41ad68e41100c94c54cb87cca96b92cccfed0b5a40e09e5e56d2f667d5d5e3ac0e34a99158c3d2cd4741ca0baf4dd154901bb605d6b1fb471b1fc1a00f372ef4a4ee7a3e17da6a9e7741bcc5573d1631e7142d03b5db3f5ffbbfba6af2c6f56a6fb05bf52be381a549e47f37a3a3b695b710a784b76c15884284b6f1d2cbe03d19c5fa9306bfce7442260d7f52013404c7d8d17f0151817d8b1cf4f719babd28c5ba4f84556e0e2838618cfe595a2216e80192db7d4ac4ca99020f3d25db592081161be4c326a43fd2e4d3cdea6fe1a4455b5e88f15c8f55138db5e29aee842bccecfa75f33dff4a27cb55f12647685a7628debd6c28dc2df8d1aec28d069434865725d6aff7bce96be12ff8b197bb973161fb543c1d708501cd9de0014c35b32135f6b1568c85ce6c17af1cdb88093909122d84d4fa5c3e0ba5d02399bd1a80718f623d80538e2fbf9e9e6a686f5d59d6bbdec97e7ec929dcf1c2cdc37efd4321a55a1a45a7a6619c438fa95a7d1507cc0ba34fcd5ba774862ee028c7d27195761b20d1f73abd223d66543a5a12f22970af9f07ed7f5d3a475e69215abe0808f1f674fb53091ed081e6f4fe9f3aaaef7f268604a24b9927553a51c1b933d6c6a9cb3441ae89a36744b0915f9b06ccd87b4679380c6921f363fa991675993cecc1f08f146e8450d1c488b20c0c59b3d5879ae118c7104e0a51dcfdd8e2b0ebd57a38f562df4c56dd4b955dd77ae5867294748fa152cbf090ab52959d8b7f9d0ed4a2cc080ad7f4895e3f242f156a3fd1c99edf86954ae9561c74a9597b157ec6c98603cad9af944463a263f9c3131b470362053ef6b1d9acc63a131040e8daaf073fafefca47bb2de564be7c29663bbd203cffaafae3f5fd3492bb657f4e19234c759cfc139018feb6503a9f76a93701b13c110783e281d8320f16537189179707faddb6e2581dd48c0423c06e70ffef1d1efa3ad682690a904c51e7c594951aafdb1bb1e833e0e30bc47205656fd99de7415febbdb401f5fbfba2742b7b43e69e75e98fe7dadd74197169eb27b9adf4b5937f9075e001dbeeb98fcbb6c982798fc72f3686d548867bdedb573304c7d3e70d0472bda416efdf5ad283a2d4060798b05952d8070bc3858f10800d6d13e26a232bbd649a3d08170411bf1d99860cbec414d2c4848501116265cfa0e37ff4ffa8336ff3a5cd8d161274f1006757919e2948b536a3ab359de632d4a7fc800c10f293ec0d4accccfb8344bfc86f296ce316ee563780a26204e3af86fd7887123579fa71f67fde14a49673c44c9139b8911369a15b12124176d0697ec2ded2fe52e6b45c25bb71eac65ec1f73f5bb4118477394fd27ce4055e2fe5bc54daac6116431ad90d9fa87701fbed39e7e6f55fa9082347266ad64f5c40360c971da4b4863d7dd6ff450524c282a2b4a93fb29feb2a8ec2a984c083b2d3b82f0661b8f19015dbd1722ffc9db0dd90849b09db719f2b5eb2fc510b5ba070ba7d9a7fac815e11e865bbf9fa6fbe1ea596293a59d5d2e9479a41b56bf180c9102e08c17f1d979fecebf3129ee6ee0f3b48809cc8ea2df50b12bc5a83192273e9efd686d9fc062dda9b71274456983383be4444fb54bedd0aaeb3f1d41afc1fa26a29f840f30bc2ad839120d6ced6be3d2aac6c4f40983944d4218ab441c7189036d767d83d1aa652506324bee88b89e0aa679d8dda3df2c68e93e0d9675f84cafb6d7b08e44e84223423d87a2898199554fa7e0de8d6b34f2e79169e6ec73c8b63e31ef8a68bca0fa729b833184e7293b785aea4bcaf53f4602f0d299128e6430135992ecfbee5556545029f50c004cb7db3ab7c58ccbbc7b4056303085222e305e46497b2b2ef170c670e46f75752e4d5f8de564af74791d030996e13e12809cd5fc72f0f794289cd8a43915abb1094d6f79b3afed4b6d663c13b991ac5b9666e5d4870afe73267c8c6c33a6263f4f79cb3ec9e72ac6f70a2928cfac9d5b8b3912b68275587ea8a7f38f0f9eb2f0dcebff3b0050fb7109572082631e8213c8dee0e1c513ee8dba94889ef07da543c0990ae3ef96656635b89041e6a5cdebe6e98a6e7a99edcc1dec3c960adc4ea9434835a86d7fbfb3cda59b4d63a8f0c379082dd71803362d125359e573b32f54af0d7f51cc789c9e57b6ac94c09a9e8b7f1668658acf79363b02a1b90f7efeffadd826cf9aaa346e83537d23917fd80a5c12058601c929be784c553bdda05044f6ccaecd9b440cae6364d774d5da3378d5f8be39d92ec88752e812545be30a683eca30d02671a2a081523424ac7543e633f9b48a08cdb04b0885883cdd959f8564df17828ba0fdb45e56419c21eead31e62820c606dfc8484c53cac9cecb8e87b4eeccb754e0a4edf74cc34a4e28ab44f3bd78162cd9caf940c9884a70d2ff76c850e8ad6f68f33f3fe55930d082a4e3e2bd027882b0f9430fedcb04864f280626cb2ed924c686be76092b5ad7b99e49cfe6e8b9b89d3bea8b06b8a9b95013d49524cef1cc2287ca7a546b05298f24b8571d84fcd49e2202c45ee8f78248533c96258f40432dafa59e2540af4f84764aaf63b0d75dde927691c59005c51a007160abb9e6658f345db060debe21ca1419fa34fe9d580300aca9d6ff5ba55ac25db44d52a984a42407cd54d9e4ed6e716f995124c2bd2260f8f6d5a35e1ab8758f9e0e336c4f94986dc649dbb96d63b8cdb6c22661feb7cfee2525c7260c9763dc7f45b6062ab5544166505c60ab0ddd0f248aeb3fa74b74cc89cff1fc60f9d9b49162372cc61a25375f7cdd41dc1c2e96ddad246fb86edc19bbcb528dd7f6c2f45daefbcc5fac76f04d39159ab123aab43f3981b04f7c442f6569983bf88aaa7b34cf21e809b30f4541ac881bc83c63dbb376069405bab0425f03f35c82cfd3e452620073923a0458ba549fcf9d4f333a2620930ada30f9cc92dbbb4a8b9e2eba92e40c1e561d91601c2d13f4adb6dd7a798d82d2ea9bbc47b10a455171501ec3277a86cb16f5a25863556abff543e541731cb3dd79fdda5f0a6e0ee862eb6e1f47bf20be6df190e34c74f834ddf2c3d2a1a4953535795311b91c84b959bda8af996490c2a60a653252fc999c01401038d43d7f9034f23ca62a78a4b844b5751bd9545a12b14aecf51fbef49d71a3e00cad46ec3ff977652ebce8b9bad77ba29276f530b010b5233a70fd68737b8528a91d7d7401ab27f5c3441703e4653faa5fa20cf0d690f3693c7c29b4e663a3ce9d39ade64dc2d3ad4f0ec9f6f9edc7b32b2b9b2375fcf8faef28b833c3df27b2b6a254da82248c7d14458658251ec5555a0654f9b8d061ef6fd6be3593032ae7fea07a9ec5bb92071d66d4d6cd44c08a729e477f4ef47166379c1d106ee0950975e1ab765a6a39f766b64b4dec0849807b66035df60a28a378844a1d5e6dd9361d83f8977d9d006822a9dd79be4edd63237d5b8afac469d7047197daa5836ed7a3e49802e9c5a6b70e0952573ef6c39ec48627e7033459fa09fa045c9226b6240f6cfd1618341143e2cbc21c0e56e7337e1be1b23cd492e42b7798a1261d8f4858549c572e67dfa348603723750bde61a7eed4849fb7ff695b14a078aef1424ecfe98e4b982105bff30b6d2614e03d58600070d9ad67e80b0dcceb0bd3151b5e91d9500adbe4d812b5bb7a450bbaa11c10649d21392f9b7cca4e5b200a48c97a949388054834149155d96ef92d1daea51ccdc163a878cbd749c9efef9e09a89c3de9a4db8509a4b3c53a8f79933db47a5cd8e11f09956f91b2bb551bea3c3c84a69bfa0e382704f536544095a9fc9b94c9029016ee9b2f60844fbcd127742c57dcb1002d749581b1880eb6e84bf6a131fe1d6a6319de68ff1a6473114d82dc0412e1390460010eb8047809edbf7e94d66ccf8dbc830ac5f48f56c4f7f90019b9d522b017e7b627a39e47fc51fbe4c53ee2bde55efd39cd12f645f9d425b61b1736e56e64b992f3a594d3b859bc64675e282344a0fce20dfbdeb1ff0b97b8c04906a6ecafd224cc16c8f585a5e24eb8add48709001a90071383b223eec190e34b398dd99fcc61245ec0e2523f8649f3281da1845e953c9e500d7e8e555dd1ec4bdec9b40e257c251be512c0e8dd66bdd4c8d90c1ad87e0394dc7d6e5359baf06a1cb1b26443951284d738147b39b091968afb95b2de991674cbf489d399d3e3993444a055d180a24cc759258a16e7ff9ff624314f22e6fbb84da61e25c9e1001713aa93c4cd52d6cfb566b15f199702586b163f300f88a5873d4f95675a99b4b15964660b5a8372e79d6dd08246d7643d3730adaadb518d2b153522a2d56abb68227ac0ce24a4f0dc1b489d38cae854df9d5ecc7198128cfda098304b7f738876ca263a5cd40d26f0c7a1cd0e617feb3f65e75929846509f88e6197acc37296100270de3768fa345073bad698f9a0f28b3a0d127956ccca8073615b0031c998c312abec1c809bfc915c7ba4a3359a294d4b4ea261760e8832e7d11e93fef8c44fad18e3e7ffb090b94f56c3790efbd700cfbad2eb93de12ddd232591ec3032a262a1200dee7f32a6c4e3aeeb7f14779ff67f6a749ce9d57eb15b649c494bf843d889a00b758c79ac0f3dd20b1637d5b5ceff4c99c5a3ce4898a0b819b9c551ba8f466247758137edbdb7de53f63f52d7eb3ea7a54a689e4f7365a3ef7f7722e41ef375e213f5c03163acc1e6d98769bba868cddd9ad8da30b408f5aeabaa7ed67c1d7632d73a7cb9175a985efc91449f44558e2be669902b6478b98c70f7b38c06215fe40dfab08a7408ab2939089b078cee7cfdc71360d2b966d8efc4e14b82971a872cc0b4a715f532bba17649827c0e6564be9fe8e97db425c863c5bf6e42ff438fe7585422450286d7601e1b6a698d6b719fe7807c4136c7244840af146108ea85a9e4db83dd3c02471df68b72b47c7ae70961a854438eadc8f4c88de9357c91b05cdc6f4b83dfed69f262a51934c1694b5d8355c5b763e6231796c53e8770ea1590c326cc0bbc29e86bb4b2deca5a3891803116e8749d065507e13478f61c254404cd448d6ab505ce455dff6112465218680083b1550bc59f1e84e998eae641951ab2b845c5971f1ee7482bcff597d000773b5182f08e10b11df887dc6a359ac633c42d8809f23170edf9e73b86ff00fc0da926dd71edd622d88fd4cf2d3f28eb6f4806113297433a659e4a3f455873e190adf984712f784763a8aed0ff2e721b31ff7257e5e7c106be7bb463549174d6282da8f3bb3b1c0193a7378c7a909b4ef82f9ac5737ce420b3e25fc7d801ea122b06b1838b0341b25a3a8007a3ef2b4caf1311717a1b38f80c5e6b22bdfa66b7c7bdb4e27a00e1c699d1feea04165fa7cb488c615aacc02dc3f744454b731e08dedeb444a93ed1bbc4abe755417b7a36800f63cdbd683be1c42c58c47f6586a9e0ee92c34eb619a21781464349abf66d8de47a2fc092ddc0b5466a9f67da32db6abe80f0de664f38d8aca9d65f4bfa2785f8733f30b85c64b75d5b6fb7a8dd3000ac626d0b7fa610f0551ccb5a8a74f31ff36958412eafbd0c6fe99067860d0686481246d54", 0x1000, 0x8}, {&(0x7f0000000480)="b62deb6b8db2aa2abdbc7d", 0xb}], 0xa0, &(0x7f0000000500)={[{@uni_xlate='uni_xlate=1'}, {@uni_xlate='uni_xlate=1'}, {@numtail='nonumtail=0'}, {@nonumtail='nnonumtail=1'}, {@fat=@codepage={'codepage', 0x3d, '864'}}], [{@euid_eq={'euid', 0x3d, r2}}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)='R', 0x1}], 0x1}}], 0x1, 0x600d054)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
close(r3)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r6 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macvlan1\x00', 0x100})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r7 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0)
ftruncate(r8, 0x8200)
write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000240)={0xe, {0x9, 0x7, 0x4, 0x40, "03a6283511cb523cf83684026393395d90d5a68ad7bc30c4313eb5bf6c4ed3eac29d407bd5f046bd809a820f0324660dbb51de63b192cf1e044cada7c9492d32"}}, 0x4c)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1d00})

04:05:14 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/urandom\x00'}, {0x20, 'vfat\x00'}, {0x20, '/proc/self\x00'}, {0x20, '\'(!em1cgroupppp1'}], 0xa, "9da6590fba764904ea12af373af86f4d16e16f6373ddded1c84eea6cb264e1b298ddb8d925b74f144b7591d6bdd9660935b89679b658508841020c54a7292777bae15ec1d42feb58256f7bbf358f43922fd25f312d67be72f8b08bf41745f41fa09a255f5127fc71f7ad3255da8f0755e3ec0a384d5e5674a2032a6d670bc51011727f7c17f9003449998f29f1eddf8d8088c093b48a93a85704db58824aa7627aca313594a8ac09871ed7c8a64f4627d0171460c2e1871344cd7e089d6c43b0e5959eec78cdea4828ee1ae44a69c394ce79"}, 0x10e)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x8000, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x9942, 0x0)
r3 = open(&(0x7f0000000340)='./file0\x00', 0x20c000, 0xe2)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000480)="f013f509a35f89c691a72e4c64f7e376907e818367dd16fa5c1133b96859ba2583751eb23f37c6c0f30185ada110134e3df979c6941c40e5510cf234be8ed41c1623356f84b192ef529f1219a3c7b41c9bbfba2ab71d7dc55a3a0bf4590af3704763a678679733d1769fed9a5df4834a56ac727e99a95787af08a1cbc9ffb4cb1e3b25f58bdef83bdfc9")
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
fchdir(r1)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00')
r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10)
accept$packet(r10, &(0x7f0000000580)={0x11, 0x0, <r11=>0x0}, &(0x7f00000005c0)=0x14)
r12 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r13 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r14 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r15 = dup2(r14, r13)
ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r15)
getsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000600)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000700)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000740)={'batadv0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r6, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x64a1, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x44}, 0x1, 0x0, 0x0, 0x506cb68061aadd05}, 0x20044014)
r18 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r19 = dup2(r18, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r19)
getsockopt$TIPC_IMPORTANCE(r19, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r20 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r20, 0x8200)

04:05:14 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x0, 0x5}]}, 0xc, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f00000001c0))
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delroute={0x1c, 0x19, 0x100, 0x70bd25, 0x25dfdbfe, {0x2, 0x80, 0x0, 0x4, 0xff, 0x0, 0x0, 0x8, 0x3400}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ftruncate(r1, 0x8203)

[ 2181.617786][   T22] kauditd_printk_skb: 25 callbacks suppressed
[ 2181.617793][   T22] audit: type=1107 audit(2000001914.562:10442): pid=1950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2181.621134][ T1951] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=1951 comm=syz-executor.3
[ 2181.625030][   T22] audit: type=1107 audit(2000001914.562:10443): pid=1950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xce9e, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66739c666174000204010002000270f7f8", 0x16}], 0x2800024, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x44)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000000c0)={0x1, 0x39, 0x2, 0x2, 0x9, 0xfffffffa, 0x5, 0xc1, 0x1})
ftruncate(r1, 0x8200)

04:05:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2400})

04:05:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1e00})

04:05:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000240)='./file1\x00', 0xd0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000))
r1 = getuid()
setuid(r1)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x800002, 0x12, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000100), 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:15 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr="00000082f3809ef6ae346400"}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4002, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00')
socket$inet6(0xa, 0x4, 0x20)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000ffdbdf251b0000001400030000000000000000000000000000000001080004007f000001050001000000000014000300fe80010000000000000000000000101dc67000aa"], 0x4c}}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x1c}}, 0x4840)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="f068bd0ad0a5a0f3e9eb3c906d6b66732e664174030204010202000270f7f8", 0x1f}], 0x2041000, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x20, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000005c0), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x200000}, r1, 0x0, 0xffffffffffffffff, 0x8)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
chroot(&(0x7f0000000540)='./bus\x00')
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = accept4$inet(r4, 0x0, &(0x7f0000000080), 0x80800)
sendto(r6, &(0x7f0000000240)="1cbc1541916fa14f47e2b9d71b7ec4dc05d14036a8e31de2515e435b803b2af634449969f3f22de979f43803b66255ed73af6bf6e143e5bb3d7695ada0c68422a7cbe1ee3f9b0a24cfbfb17205f3943df6ed6f34ea", 0x55, 0x2006090, &(0x7f0000000340)=@xdp={0x2c, 0xd, 0x0, 0x2e}, 0x80)
r7 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000180)={0x6, 'hsr0\x00', {0x1}, 0xfe8a})
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000200030000000000001005003bc5bdbb9699b105c092d500000000000000000000090000000000000074687265616465640000f780453eb545205dc73138db52cb39a30ae7a844d9ffc1833e6713a51929f5c9605185d81f05adb58dfaa7d7742f2aecf9aab75fdaceac97b502c8fd713d013954a3fd903a49e9731f73e638fb51c5201df8cdb84361"], 0x2a)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2182.434876][ T2184] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 21)
[ 2182.443703][ T2184] FAT-fs (loop4): Filesystem has been set read-only
04:05:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x68, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'fou\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@local}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8)
fchdir(r0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xc0, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6fd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe0000000}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x10)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r5, 0x800)
lseek(r5, 0x0, 0x2)
r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0)
sendfile(r5, r6, 0x0, 0x8400f7fffff8)
r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000095d4a32588b13dd09b769db3af8618a08375a8e88bd4cb893d4cad1ea954a14d4b79fd1dba37f8687f5acaa23abcb5691161d04ad3385ef121560b2e29c030f51ffa602083873e33b34f913776fed5abaeb9b18bd086d61915149336d87568876eaccd6e6ad54fc1d904f9c6db548812fb2635bd385324e59623a34ac0b00d8861e7ba9c5f06e813", @ANYRES16=r7, @ANYBLOB="10002bbd7000fddbdf25030000001400090000000000000000000000ffff0000000008000600ac14141414000900000000000000000000000000000000000500040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)

04:05:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2500})

[ 2182.737661][   T22] audit: type=1107 audit(2000001915.682:10444): pid=2199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2182.738738][ T2200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=2200 comm=syz-executor.1
[ 2182.774977][ T2200] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2182.784737][ T2200] FAT-fs (loop1): Filesystem has been set read-only
[ 2182.791946][ T2200] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17)
[ 2182.819228][   T22] audit: type=1107 audit(2000001915.762:10445): pid=2199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e68607400020801000270f7f80000", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2182.819909][ T2212] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=2212 comm=syz-executor.1
04:05:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1f00})

[ 2183.110306][ T2224] FAT-fs (loop1): invalid media value (0x00)
[ 2183.123722][ T2224] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2183.290287][ T2224] FAT-fs (loop1): invalid media value (0x00)
[ 2183.301257][ T2224] FAT-fs (loop1): Can't find a valid FAT filesystem
04:05:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x84)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
stat(&(0x7f0000000380)='./bus\x00', &(0x7f0000000500))
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
utimensat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0x7530}}, 0x100)
lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x84c, 0x3}]}, 0xc, 0x2)

04:05:16 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr="0c79fbdadb72a3e6bf69756a4abd6bfa"}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000000c0)="38969958e9a3d3dc275fa2c993e64a1d322e7c2fbb4a084bc68f5cd01be78254273815f3f70a1dbebf71a0da2ff3e72743997ec13ff048b75b901fc6fad4db0fb6f98866eb6277be0668b403cdb60dd0faed2ffb71b0b7071cc2b701fa970d0a6996b99e0aee1e052519612bfd9ba8ed86307f486bdd5a05b7682eff15f2c3543ef4437ca3d647616bc020c0d6bcb033b0e75fc91700c3175bedbef2a083f881404abeb6e13f68d54d584fd72ab2ab8d8d1251872c9344a1f5dd47e60bff87dc4c86453349851115e2661d4151d0808c40bd822db96f316ced3b5643a9af7b1267c64e391be76bef6c7e1c2322755fea43ba58")
setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080)=0x2, 0x4)
pipe2(&(0x7f00000001c0)={<r5=>0xffffffffffffffff}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x220, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb9d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf26f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @remote, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5a1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20048051}, 0x800)

04:05:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
sched_yield()
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @in={0x2, 0x4e22, @remote}, @phonet={0x23, 0x8, 0x80, 0xf4}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0xefa2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='team_slave_1\x00', 0x3, 0x2, 0xa000})
open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1c5)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

04:05:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x4000})

04:05:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = syz_open_pts(0xffffffffffffffff, 0x202000)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x1)

[ 2183.690401][ T2264] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2183.711647][ T2264] FAT-fs (loop1): Filesystem has been set read-only
04:05:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x2000})

04:05:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x40, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="8622deaab671"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

[ 2184.033423][ T2277] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2184.046652][ T2277] FAT-fs (loop1): Filesystem has been set read-only
[ 2184.195818][ T2293] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2184.213716][ T2293] FAT-fs (loop1): Filesystem has been set read-only
04:05:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x768a800000000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xffffd}], 0x280401d, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f0000000000)='./file2\x00', 0x321042, 0x97)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:17 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x1000, "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"}, &(0x7f0000000180)=0x1024)
ftruncate(r2, 0x8200)

04:05:17 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sync()
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0xa0100, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00', {}, 0x2f7})

[ 2184.437510][ T2306] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2184.448708][ T2306] FAT-fs (loop1): Filesystem has been set read-only
04:05:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0xff0f})

04:05:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00')
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
getpeername$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e)
fcntl$getownex(r2, 0x10, &(0x7f0000000000))
ftruncate(r1, 0x8200)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r3, 0x0, 0x0)
r4 = dup(r3)
write$uinput_user_dev(r4, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005]}, 0x45c)
r5 = syz_genetlink_get_family_id$netlbl_calipso(0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000ffdbdf250200000008000200020000000800020002000020"], 0x24}, 0x1, 0x0, 0x0, 0x20000045}, 0x4040004)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00082bbd7000fedbdf25010000000800960200000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

04:05:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa00000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
getsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000f2acb4563b394f9cf91f539ba3ea0625246f0c798f0000030000000a14000000000100"/55], 0x28}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x802)
r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000940000)={0x2, 0xd1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = dup2(r10, r9)
setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f0000000480)=@v2={0x3, 0x0, 0x5, 0x4, 0xe6, "bdc2b97dfa948a92e1c5e19dd49ea3c4f45786da168f7d1f420330ce29c1914754952883d57f8a49fe525bd969e5a936c1d998bdc6bafebfec4e5f135e0a26e5aa4a849ff6c2efd2fd6b680d7c80efd0ad3052434c3ab6023b0c2ccf18d6e6b896daf4482b1f951e3e16cb63a6f6d7d3796c7fb6f8026efb0a0b330424cbbeb4795b1e532e12c760fe441898b29d49e1c5d87c5da6dc40fa131f19fbca6db16b2c455022dd8868c8072e6fe39c143247c83b71ae13eda850733f2c28b43b681f5b14c7b16827ee371991b0c65f27b604dd0f026b7f53bcd7993758ed852a28580070b7bfa430"}, 0xef, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11)
accept$inet(r11, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
socket$inet6(0xa, 0x800, 0x4)
r12 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r13 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r14 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r15 = dup2(r14, r13)
ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r15)
write$FUSE_NOTIFY_DELETE(r15, &(0x7f0000000680)={0x15a, 0x6, 0x0, {0x5, 0x1, 0x131, 0x0, '\xb22\xf4\x18]\xcd\x7fET\xaf\a^\xa5\a\n<\x1b^\xbfj6\x05G\xca\xdc\xa3\xb3|\xc9\xe4c\xcf\xb1:@\xe6R\xe0\xb8\xa7\xb0\x7f\xd2\x06u\x94Ob\xa8\xb5\x7f\xbc-\x85UB\xa0\xae \x91\xff\x7f\xa9\xb8GA\xe7\x92\x95p^\xb4qdh\xab\x82l:\x0f\x0f?\'\xc8\x00\xbd\xf4\xdfW+\xb7\x1f\x00\x00\x00`=\xd4q\x05\x05T\xcc\x8d\xdc\xf7\x86cF*0\x9a\bmf\xcf;P\xa7Sb\x94\xaf\xae W\x11\xd0\x9a\\W\x14\x0e\x85\xf4\x97&B\xdcm\v4\xe2\xaa\x1f\x00\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xba\xffP\x82\x88\r\xd5\xf7c*\xc2\xb2\xe4d19\x13\xa3;\x8d\x95\xf8\xd3G\x15\xa1ZQ\x1e:y\v\xa1\x97\xe0\xaa5x\x13\xfa~\xfe\xca\x88)n\xa4\xc8\x1e?\xd0\xf4\xca\xf5KC\xf7YW~\x89\xd9\xeb\x99\xcax\x89\xda\\\xda\x8a\xbc\xa0\x96\xec?&\a&y\xee\xf8\x18\x8a\xe6\xd8/\xfc+\x80g\xe0\xa0p\x88@\xad)\xbc\xdf\xc32\xdf\b\'\x1f\x96\xe4h\x862%\xcc\x16\xab\x80\xaf\xe1\xda\xcc\x90=\x88\xc7\xe2\x9fp\x88\x8b\x9f\x9f\xf7\x97\xfd|z\r$b3zP\xb8\x176\a\x81'}}, 0x15a)
fchdir(r4)
r16 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r16, 0x8200)

[ 2184.528789][ T2312] FAT-fs (loop4): bogus number of reserved sectors
[ 2184.540040][ T2312] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 2184.621680][ T2324] FAT-fs (loop1): bogus number of reserved sectors
[ 2184.659298][ T2324] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2184.666639][   T22] audit: type=1107 audit(2000001917.602:10446): pid=2316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2184.776084][ T2369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44274 sclass=netlink_audit_socket pig=2369 comm=syz-executor.1
[ 2184.824891][   T22] audit: type=1107 audit(2000001917.762:10447): pid=2320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:17 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40067}, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2184.863751][   T22] audit: type=1107 audit(2000001917.792:10448): pid=2320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x2001})

04:05:17 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
fchmodat(r3, &(0x7f0000000200)='./file0\x00', 0x2)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x301000, 0x0)
open(&(0x7f00000014c0)='./file0\x00', 0x220001, 0x11)
ftruncate(r4, 0x8200)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000001480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000480)="1ccc81596615dd6fadafc9eb9421aab44042f16603b8c18f19b4b553abb20319c3d01e312c72b01136b8733aafb434b0b4b4bd29c26d2b37a6525f79ef541940e9955f8a309e0594151c6d4cab56b4f8c55e0ae53287ff407594fd7eac3911f0abcd4657d2ea1a59d90e8a1c822b7e6f441f3710a0d340e82ee98ac6e4c026c63a1bba6d6148e8297864d9579f4efd32334bedf642071bcb773d4240b57e5ae4fa0c301fa0b6d427746c7c904fe4ae90b1c6e953c20a626c1fae509d5b84734891433fd5c00abd96aad6f871a2f576c06dcec2246b18f012bbcd231f39d1d03034214a0ef1a33146954e7e2eb324d83818f9c7544bea3138143e7942bf6c12022f37819cdd23080eda14a5d8a34dbb965c500e65d4c2ceb041263d8f9ce60f18e8921bddb8f8c09e426a9e852901a4a676cc356dfcbb6ba082eb58dcd794ec681aef7bcc476fdc942bab6b04398480fc920fbd2c47e2fe32e044119f7d1c9225524fd242bd4619802f52f5f446cb55ab5e2dc571d6f286230e697c7698c53a3947d624055f7e8a2c1665a8d32b28ee6f68481a81f5bf7d5dd1cebf5607b85e39f03707a66361b9fa02bcf9c6f23120b17bf79a19eefa0ab91f4c032e57b7d4e30cebd9de8c72912b924926c69038beadb967ff2834b0364bd81f34a18d68ee9337cffaf0bbbc83ffe5288be7c4d2d3777853eabff3b88cef91ed6e855aa0710a4f8632f624f4f25756fc3d098139ebce3e0969303ee71605c48235d7ddb7d8dc75d00a4161dad41e4cc965e498a5c30f76567801290ed938dbca4f7ff735fd7dfab419ef44518bd9776e5dbeea8bd5ca1d5978725e0f678d8820fb749f6c949dc9146923422551abe2aa2fa6c127d1d36743b6d6fb7ed53235e4a6a1a649e4197b7c5ff2e38603bddb81a32b2bcd76efee0400e6728ab5317e75de97284468d704c7d34a20fa53937a3f1b6bacbbb12498fa1c3a2e62a22e8f003aa5ff0321cc7ec24e6d040853e3c8a9688659d626180244fb7ab1cd5bc0151c100b86b7fff8c874d461711cdaafafb176d4f08b9a21de24c63cf8d788fa3c276840651fb6cd83a9728b75c7df015c0d7ebe6a083022d139daf40187611106a699988df4817d117ede2a3bfc7dc1dbbdf3d8cc537846aa37f5755952ed90ec6fe99eb669d5f731c0646aa55a546e8659f802a4d06e1676c20965da7589a017f0b01c2afc8e04029ef55695661d41a12df99ec25b03f1eed77a3de610d693d21f39cb8cd03fb96583216ecebb1c189dd36acfa24bef5be5b0ea5bae4f2786a8335e7ac0183590df6ad148564f1fe1dce97a171ca941fbe7c1f41b2d1e2d34d78bde98883ee003746b3dd98047e3d18084f4817055af80fa443325608b2b624c4520004c93106def274a5af83cf97125bef03b3374266741e2f6ca20ef7aab7e6f077d8d4ec58b59e5cb299eb1d28ab736ee5a7186d032c51ec360857f81ff4d603bd6753eec3d0eab17666793b3f35a2c6d29d14ca23be411a713db714756e0105e8140bbe7af15a528b132dc51d2b87757ad718ae04e4a1b7f5822324ae55cf5df52a315dbbe9ca9b92e59cccddf9c55f9325515cbcd0e6ccf343eac6ce1c3d704d6569b3778c1f819db17bb2f225c3704d2714fe0b60fde854b7da7f4f8e2ed536205a0c8ea0fffa02fad3a289ff505f2480695e253e958dc2f57bddca702d75e1a84b0460b0f50e536407fca0fde0731a0c0591148472a413957567918b627259bca556e2afd593716ab644907e4f0704bcec283fe72ef0ebde5ae6d77e7035618809b4c2a2e152d16c47482f4ea99dab3393e725d867520f98c40df618af2dbee5e93534ff4148cc769d9634aa9b5e694ad9c56ef810925c933c253c8106a37f4e1d0456bafb972182fb521f60757e54e0cdbdcc5d4dbe22088bad78ef920b7bccc275864f7bda6f51f0233a7f3dab3495bd338acf7779dbab6bbddd38636ed8727d693dd4cec960a30bc6e489fb6b0d12acee1e2b0b76e732e044b1b9246d6bb3b4647117674482aa6d1167b51dbf0f73273b63fac19647aa436da408fa6221c45949ae4f2dfaf729575fe7ed5fc76207587a135e2898dcb4616129c2e18d3be71001377cb69990ff4746e17ec20f6c8e6bab154dbe7b5e566d3eaf13b426a3063045262684337640c04904a61611a72c1c29733eb22305b34f1a85a7fc93262f21942e6c8c34fa040701260e67f734c430d144e932739ed53953bb08fc9b63228bd0a4616cb641d062c33788600a66a690738874da6839307aa619f650fd5729dd16635ab9f0580d15b458ec4e77b29439c591d82ba1e2c75a10180072fb12987481046570fdd044d69af37fff460bfd4ca1177eef3ff717c78124e58fd37f18c117ef687d968a1507fd60393e9f447451c94922df6cc6b5df0b77270302e930d0d3253e96547be467216779589d977321062a850c114ed1f0257c255dad2cdbbac00632dfc65a58675396fd433ea440d51b6235651b416b7e96c50044082fc68afa5c0537b16621f8e72e0f72d8a70c646573cbb45728f21e8ac9222bf7b9f2208cda684d15871dafe018762b16af2bc04618a100afda6f6ba89c8870c1a3ea2b23811a7cb3ee5519c9c1fa0001584f5acbb7c35258849cc73a41b7bdc192706b532669c7bbc48078a9e4c3940c30eb10f2fecabcb9991c1b1bccf81a0d5d9bd97eb4e320f828705d8ebaa36eec45ec5de3792507dd911c7a032bfa237e841901935c130610c2f279d6f1aa63d4c44cc69d752d269f9f15c270ed0234aa6c06f9e808b4fd4ebec6e9098ab4d247a8a6646b929ca8620fd7923459dae8311014ec5edaf95e7cc45a98d4af67806abfd9b9d8eb11a9c6f93aad291ccb5abee268a55632c979e7c5ae8ce64be2cf438b4701fef52d9b8f5bb99facf02861a4acf04612b491c6ab708042067818f99e0f126c43db030119d9f87ed9b2f9f356fdbf2cf7b2df4aa1af11b65d175e97ed400f8530613f85cb0a4b93c8ed7610a307888480f24c06d89954e5cbe057c964edae99ee91e89ccd6f13ab0e51e166ba3b528f4f6f8b0fa6bda01d311a24ef4ed19e7d1e57f756cfcd51d40897a74ed21ed1bd0254e5db49adf3efa19b8c049a25249c8a08367b4f514da893dd5297bb0e916339f82f2d7eacb4ca1b6d3b89e74ea5dc8bc03456e00608d6f119fdaff4d01d2768c1139a88b6d67295b44910f43e5cb603ddca2955849bdbcdba2f4b0f7380f1a93168a823dbf1381d524b5a9f334421ee790236409d94ba041d5ef5a8745c1a272d8b821773c2db072648c5f927ce0670a7c0b3058d60a5ce2bd5c62669c9d26276bac95b72315c15c70638a797d2ca8f2d17ea9c0d1da88b6d6b66b7a3daf9d145a8f0fbfcf332c1c8604ec7af7bfe084ca6933fcab7efbefe0c5f83671e3b7446defe23db0f03b3747cf805e5fb98a7f0702aea162948a9c98ae693290cb1fe28c4ab4514e71b95f2a7a89721699d74c5a73e6fe6752e2159595d970a9087b2f3dfe24fdfc9e78d57615ed8a62f945204b4d8b69ab7c087137748e7832814917ee12c8f60539781a488e9e5d13e00a08dc8e12b9520e99e8fe7b7a50d3ff01216e3eafc580e72cd682e040f4c4a2e66c668084749ae62151f96f5c6a62d2c3aa37640e507769e34b8ff969e4ee8b7bcc3c5fd81ef060724d20e79e60e042ce169f63d876026354525bc3085f01392bd842071b2861f5a68d121b51b104d390d58a70fb04a8a03f46e2caee20eb5c9ef0ee1385ca58ca022ea3a04fbc7f58ea2aa135203c01cce57d7e79a5e95c352167747f8c82c59d8b6bd77c3f5c512f35b773b11c9fbdc86600851783692be3d133dbe9fb590a8a0091c134ab02fb5fa8fb0dc8fd7c4cc311e8922ce4b45a47f299b80ad51537ac8496ebe1b8a3b356ef3ed145b9656b7f8dabc02c61a75f0366c98d5a0f9d1345c2f38f35b08b79e30558669129f1f74d2852a9471ecd9a9c9f84892233c39f09240100fe91290af742685f3d6a4fc03b9df50a97e346c82b8ec6f0a5646fdde77b83258e476ab764188d05e4ea46861abbb7df2f2b832c4180abb935bc2133be3ff7460bba406e1ccd4162c545da3ce2cbcb43bc0e86f323ba21f8ee7ad44f48e114353d5234e28dce76a80f8ac1f8083c67bb0332cc9ce7626635d28df6475dafa2d9e0df4286835d8c140a37b09787fafbce61f6bd88fa2207361c71ee7a457e3cb7f192c118c9f82cc3eaa8cb8c36a78695adafa3c1dce3736441c5a9fa48b2f1ad8b625597128b5f889b47850573e3cb666c40185d3dd5f6407fe61cfaf61c265a295ff1727fe6f31441ac5d0fcca5ed6d18a8c625503060cc4d8f9144da63bde782b8c7d515cbdd83ad1f306217de9a16ed88f32350178db6eaa716cbc9add569981015c812427dd9b89b6aa95602c312c4ec5a4bc16df51c189e3d551f03ba335a80fe822d63eeea69fa3c085f94c1d887007fe3548833c2e639dfc15d34c43aa0277059b6cdf185073ef23e3394710d9f2140bf5e5a0bd5802e7b216b565d4f5964130e6bfd02ca0d488f5a9bb00a66e13fe17bb25b9f942f3398a63e140d172012fb9019cfac7731201a8eba8c6107a5117d1db6b9e63f48b501958f654b26e5692ffbac0685a8857dc675dfc5316b5374be8bb97900df141d0d2391deba48a6c8914892f449a75d1fa4e560f7a23ddd928ad544b3c1dd0f9ab6e80f5d6622191ba326cd4c3e28cac9dc5455c2f6e9cc37130ec8ae84e758c357dde6aeca7ccf903b4a128ee9d27050129659746d01ca3f6f192edccfd7e856aeaf6c4992f9c24f653e5119d4864609958b7d71ac0151271a9a22b1ec111e2c9a452d6194bf69b10b7625bde7702c36f91a5f533e5c1ee6f09ce87dbe97ea771cdab9b6b9ff5509d9a5d8eb60f0c0c6b495dd22358d7add90548e16b737862f7b4e9993f7162122aefd48f4be65d90a6f7b710958c925a7061e4b3ac89af106706370cec29e59d9f40bec2d61f5c90aae0ad2f6204e58b106175e133b57367cc42424829e114b95fb42e9458d0b16c5b4941e8cad1c3f64518b6a9a2b66194b9ae9639dae93cf9eab53cd7076ac86db27ed9095f314d1bcdd7f0940b17fee73c424074770814c21cf259a27371f2fddc8cac0b21537bde8ed792009cf68b98c4a08b280cf9760bcb2ef0022f1118445657b5559b7aaa18974b66fb1e62215d74e70ef3b592fba19fd3066ff349a314e8fb123c87882485dd45b8eb273d2184302c3c834bcd76c34ae02de65567732552072dc7dc87eebb0559a13cd08788efe1cd3989756900d785fbeb77d012032c237dbe25b6c7e16a00503867bb6a49eb8cccdb03544f8f09600bdec3dbfd0d9e445a3f7e1dc61c09a995265f802e224442b19602f457ab36cbf711561dd499fc5d660d52fe87f512d10ae9e89d9bd3eaf6bf3a92ba4ce2f3af46a5b16115d8633da5475c5a454a54dbc610db4afbf618770b653dbbbd87e01b88a868fe937fcb5e9a3e938b3c3f60bad889f9b074b3c3c0159a97bfbbbff4f30806d6ab02c875d72ab0055bead2aeb92f6a2c1ff00ab3a2e75d9bc7bd1c645af4203addab0ecf12ca333e6252566cd27c5deeae68c5d882b7660ee45481384a8e6ea7785e4222ad95b3835358716db4edddfae3d3ecde1048cbc6e768ace51eea6b3e8534e81248a99454498a8b72813826fa48e1f4dcc07653d771ad62f22162bc06eece3da98d32b20ee9162dfe032e83aabd4aa47f5beff5ab0e1316b993f723dc5e8c2", &(0x7f00000000c0)="083c96bcbf5743c04e88cc9863781b1470f4cc450aa2002b59a35ceeb3c8ae2bdcfc01f5c975355940a424b10363f7964b223864fe2e9958a98e6faa79c9109242ac742a14898418179dc1e61fb3c0d90e26874afe58f24d96cd2da61e11f1d120e657983a1f51da9b1a99d0c9772147d549aee98d4bd53f5f67196d85dbd328be0accd04d8da4c5b983b42cc923b01633eba367714635f2c2ed1509166a2553ec297525023001fdc9efb9df3f716d338bdc07cd9643c9ca4effd0bfc184335d5ae57419181442075e58990a6926cf9479d49e7353c1b4587a", 0x4}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0)
r10 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x514, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00')
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r10, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)={0x50, r11, 0x300, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2ff29107}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000854}, 0x4)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0100250000000000000000000000000000000000090000446553eeb0067bfb9b572d8c9cfae6f813c53f0a1e5a5e1d6bffff0d10c8fd0599c21be34f9faab562c62e28bcd5ea9a00583e5f24249b0c15f09bb8fca24634e0900667867fe23319a9aee2779a0a1232c41b0c134b0b3f84e5f19fa6518b8c6dfb4145b70b5cc1984d8e3e1d0aec1cc64cabc9bee635afabf9953cd6c6a82cd73bb967295f"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x50, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x1a}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x88b68505f13b2b4f)

[ 2184.920254][ T2324] FAT-fs (loop1): bogus number of reserved sectors
[ 2184.945895][ T2324] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2184.948492][ T2312] FAT-fs (loop4): bogus number of reserved sectors
[ 2184.960320][ T2312] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100))
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$RTC_AIE_OFF(r2, 0x7002)

[ 2185.000767][ T2324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44274 sclass=netlink_audit_socket pig=2324 comm=syz-executor.1
[ 2185.015761][   T22] audit: type=1107 audit(2000001917.962:10449): pid=2320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2185.092474][   T22] audit: type=1107 audit(2000001918.032:10450): pid=2453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2185.112531][ T2455] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=2455 comm=syz-executor.3
[ 2185.127407][   T22] audit: type=1107 audit(2000001918.072:10451): pid=2453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:18 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000800)={0x4, 0x3f, 0x8})
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
sendto$inet(r0, &(0x7f0000000640)="50610b640c6b01169ad8cc99f8a3aaae302d5f9a58a06533af8f8c06efe9f3edb055589a0b9403155263ba00975edc16b0a33420124af76ab1cb91515f8afe19625cdcf9860d41d095c1c3533b7c8f513f839b980a4d54d7b2fa2d", 0x5b, 0x40050, &(0x7f00000006c0)={0x2, 0x4e21, @remote}, 0x10)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/enforce\x00', 0x20000, 0x0)
read$char_usb(r4, &(0x7f0000000740)=""/140, 0x8c)
ftruncate(r3, 0x8200)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000000)=""/67)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
linkat(r5, &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x400)
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x400601, 0x0)
write$P9_RAUTH(r6, &(0x7f00000001c0)={0x14, 0x67, 0x1, {0x80, 0x0, 0x6}}, 0x14)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000900)="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", 0x114}, {&(0x7f0000000480)="cb0c67519e618f5c494308d4b0cee00430be8a9a233bfdaa2b78859ab181084ef05422313a9098df0ae6e57f7343529c9b112b1240ef7d3acdd21cc60cda4dc57072bc8995ca2661b6bb54a2f7b2c7398e9f7dde6adcf430e504d9334a85ec43c268f580206483836ca62c920fa8f181cc427119aaf97569bfb158f3e18d72734588e4b52dd2fdee5b9df6cca856c5", 0x8f}, {&(0x7f0000000340)="9b6044af4a8f2055e2d6dd7f56902a469e2a8e164854d291e2fdb8053842db39d590f596d352716d8680c9b7ad31c673bef6e3f6699f", 0x36}, {&(0x7f0000000540)="aa16531d6b935b4c9eef922c33a31aea65292a719c9152e7f075a1735b8913e33ad45de5a81e6a1f2c9c605c050e565d0a712019899dd324f8c46109096fc0a47def30d3a75d807f144ad519f645e2ecd38b164e26bcc6f7d369af154689ddee3c425a0a38ebcaf8bcecfb9c5065eb674ebf6fb872c87085e5c2f9c9c7ba33fa6837a01e0e82bc1cadd690f4df349d64e75afc3ecd78feba3e56ede23445277d0cb5265613dc5a768eda9fbb2890496066e0ae827adde0318bc30f31d2c8b163fba96012636955fc91d69ff55a770aa720a7a7fc41c2", 0xd6}], 0x4, 0x1)

[ 2185.175218][ T2469] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2185.186672][ T2469] FAT-fs (loop1): Filesystem has been set read-only
04:05:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0), 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f0000000200)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2}, 0xc)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004680)={r2, 0x1}, 0xc)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0x7ff, 0x1c}, 0xc)
fchdir(r0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000480))

[ 2185.257869][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.267228][ T2502] FAT-fs (loop4): Filesystem has been set read-only
[ 2185.280307][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.291511][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.300827][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.315969][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.344265][ T2587] FAT-fs (loop3): bogus number of reserved sectors
[ 2185.352941][ T2587] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2185.369116][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.378772][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.395722][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x80000})

04:05:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xa0c00, 0x0)
epoll_pwait(r1, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0xfffffff8, &(0x7f0000000180)={[0x100000001]}, 0x8)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0xfffffff9, 0x52, "81cc8aec2a2c7afd740468ac78a6fcd8022ac86fc7754fde196292855db07fe7fa4446769cc9dfdcf7bfe3207efe7d31df1c0d1d3dfdfe8d9e93f6bde78b0aae01a051857e4f1692cfa44f74303b25d7108f"})
fsetxattr$trusted_overlay_origin(r1, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1)
fchdir(r0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x4c)
ftruncate(r2, 0x8200)

04:05:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x3, 0x8, 0x9})
ftruncate(r1, 0x8200)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000150a01080000000000000000010000030c00064000000000000000020c00064000000000000000010810180000000009f3d9253abf545c00840cb94b73f99ae9de9e842afe08389175a91cb739367efe6890e1de06c29faa5e431c68decb23001ab2901d5ae286293db902263c220e87a9646fcacd894b84446577a020b43b18a5f68552d17666348607be0de39590850714b1309274eda720caf47e040c09996cd6e6a13d0d501649f659a131ad8a2af10f07a33ca67f29ffeeed9f0f2184b7f9df55a11d3c6d11"], 0x34}, 0x1, 0x0, 0x0, 0x4400}, 0x4000810)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000180)='vfat\x00')

04:05:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x1ea)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2185.405278][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.422559][ T2502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2185.438126][ T2588] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2185.447007][ T2588] FAT-fs (loop1): Filesystem has been set read-only
04:05:18 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x4000})

04:05:18 executing program 0:
rt_sigprocmask(0x2, &(0x7f0000000100)={[0x6]}, &(0x7f0000000140), 0x8)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0xab, @remote, 0xff}, {0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0xe}, 0x800}, 0x8, [0x800, 0x2, 0x4450, 0x9, 0x1, 0x2, 0x9, 0x7fff]}, 0x5c)
socket$inet6(0xa, 0x80000, 0x0)

04:05:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="08017f042c0000000601000005000000e6020000080000000000000000000000af36f457fe7bf7ad0109ccc04fb573b0ac95d369bd9c359f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ff00"/1848], 0x738)
ftruncate(r1, 0x8200)

04:05:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ftruncate(r0, 0x8200)

[ 2185.797347][ T2768] Unknown ioctl 1074287107
[ 2185.804840][ T2768] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2185.818035][ T2768] FAT-fs (loop1): Filesystem has been set read-only
04:05:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./bus\x00', 0x6b5, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204359838c56d24cf3e", 0x16, 0x6}, {&(0x7f00000005c0)="12b6561a23e475d0871d4a7f0c2ea3435b62c1ac8962034cb31d322a56eab0d9bc6764d9feb846e842284065b61188a4158c0955a38311b33d33caad7b8f35fce7d37eec7643b107d6085da4c19afb64a9361d2d1ff4895ed21f1047b977122b4db186b87ef1ed8ae52a4c35ab3224483f2f2099fa906f1f50b254f525577a48b6839dd16a04818af9a60af969d22fa632806116aa42fdbe106564ed6ef816b3b7675c45536c4daa2dcc872eeceed2bb9a7db4dfe2c9ec40aa7a20f8fe5daf0cd067e534537ba8efa5217dc1af5a70e4de72733f034cdefd3799dd3b61612b98e1d33842c189345039f0cbba6031d4d9c1c247f2872107f2c89a879e184eaaad200a5a3457ae2b6912c0ca3894339895d0c454341906efc883453fef7848659e2be46fba9cc61293854c9c1c47c3446b5df4771cfd01982fc27a1b67dadd", 0xb7, 0x2000000010003}], 0x382002c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x7}, 0x18)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
sendto$unix(r4, &(0x7f0000000040)="a310565cc15bca71951a6482c01b25625a1a39b84924e1bbb1a52225622384a628ae88b52acea7ea8043e6f181955b1a6e0e", 0x32, 0x0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
socket$inet6(0xa, 0x6, 0x5)
ftruncate(r5, 0x9)

04:05:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x108)
sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x1158, 0x11, 0xa, 0x201, 0x70bd28, 0x25dfdbfe, {0x5, 0x0, 0x8}, [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x1ff}, @nested={0x13c, 0x16, 0x0, 0x1, [@generic="ad75a264ffc874ae58766595ce73c0bc57cdc00d8907d3964558aaa07a790562c233c5abccca758c3a6dcc5f3d47a0f65b264828f37a355c14ca197558b65dab4bca910d5184a6a5f751b629a6120381bf275b7c20646ffd164adadab388d304b0c142581990629f5c210e6efd34c04d4a05632385ab00d5", @generic="0af8b608e117a4361d9791eae1f5176e60ab24608e8520a44cc9c91c281fef0f1fce742fe0ce3a99212e036a1cedf117e0b830d5335abecd43af212dca3911c078844372ba5f3e602e844c39fe49d22398a885ec90de9cd7d312bc80c654e298d3e79c3293d50c37680191bf1afa18b2efa0576869338954e20ec7414fa35e75c58cb9c6109a3472e147603cd72f6cf2cb5ae57efea18576f5687d35e4033fa39dac19e6b56b1585849473ad5481f6ddbe28353b171a841c", @typed={0x8, 0x67, 0x0, 0x0, @fd=r1}]}, @generic="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"]}, 0x1158}, 0x1, 0x0, 0x0, 0x4c110}, 0x800)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
move_mount(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', r2, &(0x7f0000000180)='./file0\x00', 0x40)
ftruncate(r1, 0x8200)

[ 2185.973604][ T2845] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pig=2845 comm=syz-executor.3
04:05:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000000)='./file1\x00', 0x10e)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005304060000000000000000000000000a14000000e111000100000000000000000000269c39d51716456ac80000"], 0x28}}, 0x0)
r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10)
faccessat(r10, &(0x7f0000000180)='./file0\x00', 0xc1, 0xa00)
r11 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ftruncate(r11, 0x8001)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$sock_int(r1, 0x1, 0x38addc631f6d8e6, &(0x7f0000000000), 0x4)
fchdir(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

04:05:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x200000})

04:05:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x706ec0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000000)={0x6, 0x46})
fchdir(r0)
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x8)
ftruncate(r1, 0x8200)

04:05:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000000)='./bus\x00', 0x55)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7924}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc000}, 0x20040040)
io_setup(0x4, &(0x7f0000000240)=<r5=>0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/enforce\x00', 0x101000, 0x0)
io_cancel(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x1, r6, &(0x7f0000000380)="ccadac57b5391d37bf9ee6a9e6ea7bd65025076b03ce69c08e320916a6daa338e00ae4913c691e16028121f76ee609b145c85c715fd40e03b3be686596db52", 0x3f, 0x1000, 0x0, 0x3, r7}, &(0x7f0000000500))
ioctl(r1, 0x4, &(0x7f0000000040))
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r8, 0x8200)

04:05:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r7 = getpid()
sendmsg$nl_route(r3, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r12 = getpid()
sendmsg$nl_route(r8, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r12}]}, 0x3c}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = dup(r14)
getsockname$packet(r15, &(0x7f00000000c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r17 = getpid()
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000b00)={0x0, 0x0, 0xa, 0x0, [], [{0x3f, 0x3ff, 0x3, 0x3, 0x1f, 0x8}, {0x443, 0x10000, 0x6884783, 0x3, 0x2, 0xffffffffffff6135}], [[], [], [], [], [], [], [], [], [], []]})
sendmsg$nl_route(r13, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r17}]}, 0x3c}}, 0x0)
rt_sigqueueinfo(r7, 0x30, &(0x7f0000000a80)={0x39, 0x800, 0x8})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'geneve1\x00', <r18=>r16})
sendmsg$inet(r2, &(0x7f0000000a40)={&(0x7f00000004c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000500)="97155fc50e76c81e9b1380823a231d39251c9233bd936e88fa29d79b8baf9da4c0ef338bf6d6824cf5aa093923cb5f95d8713b26fa959f306e5eb9de0ef962d442bc4511b5437be8f0b9fcf003e97b8e6ea41f7b0632dc0b538bcc8b9b9187a3f868d6b2f3912d7dd2ffa43fb7704f78c13cfbe9c8ca6d4f29255a4ad7d3dfc4a4b08011f25b015cedaeb577fd864dfbcc6b03324ceb73f99c71302eaa6df39c4b35d8ff5389199552f5ab33835598271050f221d485fdc73896e233fb6083507586677fbf", 0xc5}, {&(0x7f0000000600)="74433705c35f65ccb6fdbba41424f606151049445296fd39aeabbfe318ca7a5724f986f348896b6a8b3816d5333999e0dcb34c1dde5ca98882bd528c85d9d7b203408cf87ba28d4690331c806bc6a00edc58e486cdc0675494e406a3cc4b80ba9e98092618e8a81ddc9e72b2f0b07d49ba4a23d215d36efad89b70b5734d68ddc1d8afd739b15870afeebd7c73d9e3a0408d782bebe2443c72cb8405ab5e1a6487ec18ceba6b4669869b1f4bde9400c7574d7e2044421b0b517e6b", 0xbb}, {&(0x7f00000006c0)="7592fd7d9174bba9ca1222cb452e70017b35de640a98786b4a43b212e93ef308c5dfbf6feb145170763f3020febc9d8d3ed041de6cc6405884ca7cbc36e830d38f1a9d69206fc426835b", 0x4a}, {&(0x7f0000000740)="77f86c74c7508106f3d1863216e421e970f0cb694931db87e95bbb9a4066d27505f0c201ff36a920579a6214db8557f0573db18206b4435fd9991a8f4b66fd14f8e1f8f641a4fe85d0ddc8d0eb88354a666d999e052d89f3a6551399cd5cf37245e68bb9f05ad72f43f4ea4d1f862e323f6158a14d7863885b7851801015643903576b3c1f6de40a093e0677ef850eb3cbf23bf87eb4c10fb34f081b6a5905ff419819e6148e5f88a37d580f0759b927162160e0f5726086a2eba3d7f37c8ca565475c7ae3f1b65ca06d1e7e0ccf68dcfb71ebea6cefda540d81f3f9b9e8d28eef70cf13196b8bfb87a6d9146ea706d2f1", 0xf1}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="34000000000000000000000007000000b0040000071f98e0000001ac1414bb000000037f00000100000009e0000002ac1414bb00000000001c00000000efa6000000000008000000", @ANYRES32=r6, @ANYBLOB="e0000001ac141410000000001400000000000000000000000200000004000000000000001100000000000000000000000100000007000000000000001c000000000000000000000008000000", @ANYRES32=r11, @ANYBLOB="00000000ac14141800000000110000000000000000000000010000000500000000000000110000000000000000000000010000000500000000000000400000000000000000000000070000000711d2bdfcaa17abedf7e776a588bdd8a8441c4581ffffffff00000006e000000100008001e0000001000000040000001c000000000000000000000008000000", @ANYRES32=r18, @ANYBLOB="00000000ffffffff00000000110000000000000000000000010000000700000000000000"], 0x150}, 0x28000091)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='vfat\x00'], &(0x7f0000000480)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)=',\'em1\\)proc.-', &(0x7f0000000280)='vfat\x00', &(0x7f0000000340)='-\x00', &(0x7f0000000380)='/vboxnet0keyringselinux\'(\x00'])
ftruncate(r1, 0x8200)

[ 2186.386349][ T3111] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2186.396666][ T3111] FAT-fs (loop1): Filesystem has been set read-only
04:05:19 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0xff0f})

[ 2186.670752][   T22] kauditd_printk_skb: 8 callbacks suppressed
[ 2186.670759][   T22] audit: type=1107 audit(2000001919.602:10460): pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2186.675867][ T3211] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=3211 comm=syz-executor.1
[ 2186.677837][   T22] audit: type=1107 audit(2000001919.612:10461): pid=3206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2186.707861][ T3211] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2186.721421][   T22] audit: type=1107 audit(2000001919.612:10462): pid=3206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2186.740463][ T3211] FAT-fs (loop1): Filesystem has been set read-only
[ 2186.750433][ T3222] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=3222 comm=syz-executor.1
04:05:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x39de2b8df8fdc62b, 0xc)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:19 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x6)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x10001, @local}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ustat(0x6, &(0x7f0000000080))

04:05:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
mkdirat(r4, &(0x7f0000000000)='./file1\x00', 0x10)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
getsockopt$netlink(r5, 0x10e, 0x8, &(0x7f0000000480)=""/188, &(0x7f0000000100)=0xbc)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r7, 0x8200)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2186.767898][   T22] audit: type=1107 audit(2000001919.642:10463): pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2186.786766][   T22] audit: type=1107 audit(2000001919.732:10464): pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2186.804689][   T22] audit: type=1107 audit(2000001919.732:10465): pid=3206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:19 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x0, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x6f6e, 0x8, 0x1, 0x680e}, 'syz1\x00', 0x35})

04:05:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x2)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:19 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
fcntl$setpipe(r0, 0x407, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2186.891158][   T22] audit: type=1107 audit(2000001919.832:10466): pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x10000008200)

[ 2187.078331][ T3462] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2187.087071][ T3462] FAT-fs (loop1): Filesystem has been set read-only
[ 2187.110978][   T22] audit: type=1107 audit(2000001920.042:10467): pid=3441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2187.147177][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.156225][ T3458] FAT-fs (loop4): Filesystem has been set read-only
[ 2187.163954][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.173002][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.182338][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.197492][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.206504][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.216315][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.226978][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.236054][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1000000})

04:05:20 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x240200, 0x0)
mkdirat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x24)
fchdir(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

04:05:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fremovexattr(r2, &(0x7f0000000040)=@known='system.sockprotoname\x00')
ftruncate(r1, 0x8200)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

[ 2187.244882][ T3458] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2187.320298][   T22] audit: type=1107 audit(2000001920.242:10468): pid=3441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2187.348728][   T22] audit: type=1107 audit(2000001920.262:10469): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffb, 0x2, &(0x7f0000000280)=[{&(0x7f0000000840)="eb3c906d6b66732e66ccbc3b3c632e415fdae544d13ace2fcca6bceb197f2fe4db7db26d0af9a7dc2baca69a86b68d499b8d960a56ac44d0e0afbd90773670b496102e9fb69c29ff7f5ebf7833f0ba0e6580ef6f735105104025730af8b21fe8646d0892f4bb403379d68488b15bf007bffde27a3bc000d1aa392b0c2e", 0x7d, 0xffffffffffffffff}, {&(0x7f0000000240)="313232d19cdc0c5acb7de76d1f392f3ebd85", 0x12}], 0x2848816, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)='trusted.overlay.redirect\x00', &(0x7f00000008c0)='./file1\x00', 0x8, 0x2)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r6, &(0x7f0000000800)={&(0x7f0000000340)=@caif=@util={0x25, "cbd3ae0a22814f60419546611bcbf542"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000480)="c6d75e43e6f236e04c5d0ba054cbf0f8f4d5051ff8d02fbeaf06e8f1e24fb7be202522c6ed87f4e9c856974ee7a32a0230ff8d3aa35f4ce55131470d1b274f4200ce1f417b2b808e5a5fee973a69978aceeea659b7f8247659a3ebe0956232bb350ef586fa1e174bef10e90009b91188800006ddccbf09cb7eab70228b35e8b87b04cc7d58233626f334a0869f0eebf9645d8fa3193d5c7df7b972e7d811f0347d5ab7a34fb11555864c12dc63a9af9605c92df61b85d5c475d4ff1ceb32d49a1e3fce2c60fb7da442de1fbaf52b26c94df866ba4d3d568c865fb6", 0xdb}, {&(0x7f0000000180)="a842280ed82be2a1473e85f0ab99274e9211cd", 0x13}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x240}, 0x888d)
r7 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x80000})

04:05:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x40000, 0x0)
fchdir(r0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x8, 0x3ff, 0x80000000, 0x4, 0x1, "2fcf43fe6c15b399ae0b40edcfd36de24ea469", 0x698, 0x80000001})
r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x10c)
ftruncate(r2, 0x8200)

04:05:20 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000003000)=[{{&(0x7f0000000200)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000003c0)=""/93, 0x5d}, {&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000540)=""/77, 0x4d}], 0x6, &(0x7f0000000640)=""/246, 0xf6}, 0xffffffff}, {{&(0x7f0000000740)=@xdp, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/239, 0xef}, {&(0x7f00000008c0)=""/137, 0x89}], 0x2, &(0x7f00000009c0)=""/195, 0xc3}, 0x1}, {{&(0x7f0000000ac0)=@xdp, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000c00)=""/85, 0x55}, {&(0x7f0000000c80)=""/4, 0x4}, {&(0x7f0000000cc0)=""/84, 0x54}, {&(0x7f0000000d40)=""/31, 0x1f}], 0x5, &(0x7f0000000e00)=""/126, 0x7e}, 0x9}, {{&(0x7f0000000e80)=@nfc_llcp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/47, 0x2f}], 0x1}, 0x3f}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000f80)=""/33, 0x21}, {&(0x7f00000031c0)=""/256, 0xfe}, {&(0x7f00000010c0)=""/147, 0x93}, {&(0x7f0000001180)=""/248, 0xf8}, {&(0x7f0000001280)=""/183, 0xb7}, {&(0x7f0000001340)=""/18, 0x12}, {&(0x7f0000001380)=""/222, 0xde}, {&(0x7f0000001480)=""/247, 0xf7}, {&(0x7f0000001580)=""/219, 0xdb}, {&(0x7f0000001680)=""/4096, 0x1000}], 0xa, &(0x7f0000002740)=""/16, 0x10}, 0xb40}, {{&(0x7f0000002780)=@generic, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/251, 0xfb}, {&(0x7f0000002900)=""/89, 0x59}, {&(0x7f0000002980)=""/109, 0x6d}], 0x3, &(0x7f0000002a40)=""/129, 0x81}, 0x3}, {{&(0x7f0000002b00)=@xdp, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002b80)=""/254, 0xfe}, {&(0x7f0000002c80)=""/177, 0xb1}, {&(0x7f0000002d40)=""/185, 0xb9}, {&(0x7f0000002e00)=""/90, 0x5a}, {&(0x7f0000002e80)=""/40, 0x28}], 0x65, &(0x7f0000002f40)=""/155, 0x9b}, 0x1}], 0x7, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c)
pipe2(&(0x7f0000000080), 0x84800)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x453, 0x6}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x44}}, 0x4000004)
r2 = socket$netlink(0x10, 0x3, 0x9)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x23)
rt_tgsigqueueinfo(r3, 0xffffffffffffffff, 0xb, &(0x7f0000000180)={0x3a, 0x8001, 0x200})
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000140)=0x68)

04:05:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:20 executing program 3:
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x11, 0x11, 0x140, &(0x7f0000000480)="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"})
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000480)="eb3c906d6b66732e666174000204010002000270f7f841469dad95a44f1c8861ad456a1a5a0fd4b90f20460c69ae7145c21d1da04d2b199036cfb8faf5665c812438c4a9e081cc25babe393e87aee3d08f485df7ba549c330c09d5ad8c56f64a96937cc76147ee60237dd48f7295322d38c066062ef6ffff57241698ba310f27ffab", 0x82, 0x8000000000}], 0x2808070, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r6 = fcntl$dupfd(r0, 0x0, r5)
ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000040)=0x81cc, 0x8)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000100))
ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0)
ftruncate(r7, 0x8200)

04:05:20 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)

[ 2187.675104][ T3680] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2187.684541][ T3680] FAT-fs (loop1): Filesystem has been set read-only
04:05:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1200000})

04:05:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x6, 0x8, 0x801, 0x70bd27, 0x25dfdbff, {0x3, 0x0, 0x9}, [@nested={0x18, 0x1c, 0x0, 0x1, [@typed={0x14, 0x86, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x40080)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:21 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x800000}, 0x1c)

04:05:21 executing program 3:
fcntl$getown(0xffffffffffffffff, 0x9)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x6f, 0x4)
fadvise64(r0, 0x6, 0x100, 0x4)
fchdir(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

04:05:21 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x80, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048014}, 0x814)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:21 executing program 1:
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x3, 0x62e}, {0xc8d8, 0x5}]}, 0x14, 0x1)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000005304060000000000000000006cc9f2bc5502e9a71100010000000000000000000000000af5d24cd6aaff1e1062c91dae242e6fa52b54207e099b61a3ce2c5a255bc94656ae2b44b8869bbc64e5b4c10f0ce706b211cf6c68b76fd677ca7fdb7bc66a003337ba989644c64b37d39a104465390c55c9b603179386585f0053888b3fa842fa40d13a9cf2415a871caffee21e1aedd2a4cc3f625c49185cf428954ab090641dfe2e1724d8bbb8c8fa626093c56ea717d97facf13762dadb1e2c81db8d00aa59a3a4de254ef064528bacd839b1c648ac873cd4002e954886727499ccbe0de855a5f2"], 0x28}}, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x38}}, 0x0)
r7 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000180)=0x3)
sync_file_range(r2, 0x1000, 0x9, 0x1)
write(r0, &(0x7f0000000100)="be6cf0cbfed1318fa49014b10788d059e0eaf38d909ece0fce494d39c79a42bc4b772c099679627009a2535b9910275ab95da6db6572669a208be54b881c70a28d9543d70cca5746488cb14bb17122219ac97540972057b3aad3", 0x5a)

04:05:21 executing program 3:
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x3, 0x0)
r3 = getpgrp(0xffffffffffffffff)
write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x23, 0x37, 0x2, {0x1, 0xfffffffffffffffb, 0x80000001, r3, 0x5, '-eth0'}}, 0x23)

[ 2188.288819][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2188.299325][ T3870] FAT-fs (loop4): Filesystem has been set read-only
[ 2188.406613][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:21 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x200000})

[ 2188.468720][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x6000)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
fchmod(r2, 0xa0)
ftruncate(r1, 0x8200)

04:05:21 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r2, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdd2b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x10)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x23)
ptrace$peekuser(0x3, 0xffffffffffffffff, 0x65)
getpgrp(r0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x4000, 0x0)
ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x17)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000053040600000000000000000000000000140000001100010000000000000000000000000a"], 0x28}}, 0x0)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
write$binfmt_elf32(r4, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x6, 0x3, 0x7, 0x5, 0x3, 0x3e, 0x3, 0x298, 0x38, 0x42, 0x6, 0x8000, 0x20, 0x1, 0x8, 0x1000, 0x4}, [{0x5, 0x1000, 0x8000, 0x1, 0x68162db2, 0xc7, 0x8, 0xd9f}], "9faa3ec6c91d1450252f7db215f667f6a0e5c5641dbc770d6637690350937ec3560f018246356b4c564ff1bf21ac2e4d56c055b7926a027a4ff6f4a7232eb89e6b69b39777cbe695b3e30cd57b126b65da790993fbcfa9b4eb531519503f7ae54b5abfd1524d0b85b5d41af7860c163dd33994705e54a14809b633e3c798b2d91ae8581236aab9b06e5ea1bfcab2e53f2cf1feddaefa6d72a7006f2cbd3070f8011c8eba801392dd56abb215942669c190b9b062e319517691f7853f98def1cbfbdd12a5c9fd17e7f88c0557ec12ac9b96e42f7dba2aa150357ef5accaaf337bc0cb38842a852c96ca", [[], [], [], [], [], [], [], [], [], []]}, 0xb41)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00')
stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000480))
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x14200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="cc00a400cde2cbdd3caa0713cff08198e97ee3149b7985b2de65941a8e0f9aa07cbb126f404d216033a1dba43dfc908d40fb28d590d8f869528464d5755c996db98dbeb98c1d847249aba896c3f9c1e8695a2ab28bb1886ae058", @ANYRES16=r6, @ANYBLOB="080229bd7000fedbdf251100000008000500000000001400038005000800ff00000005000800dc0000001800038014000200626f6e64300000000000000000000000080004002b0000005400018014000300e0000001000000000000000000000000060001000a00000006000100020000000800080005000000070006006e710000060004004e220000060004004e2200000a0006006c626c637200000014000180060001000200000008000b00736970001400018008000500040000000700060066"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4800)
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="00032cbd7000fedbdf25080000000800040005000000080006000500000048000280080004000100000006000f000100000006000b000a000000080005000800000006000e004e21000005000d000000000014000100ffffffff000000000000000000000000380001800600020000000000090006006e6f6e650000000014000300ff0200000000000000000000000000010c00070009000000100000000c000380060007004e200000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40448c0)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x109)
ftruncate(r7, 0x8200)
r8 = gettid()
ptrace$setopts(0x4200, r8, 0xfff, 0x100060)
tkill(r8, 0x23)
prctl$PR_SET_PTRACER(0x59616d61, r8)

[ 2188.554315][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2188.575705][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2188.585283][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2188.594842][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ftruncate(r1, 0x1)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4)

[ 2188.610418][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2188.626801][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2188.645789][ T3870] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2188.690073][ T4215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=4215 comm=syz-executor.0
[ 2188.707433][ T4215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pig=4215 comm=syz-executor.0
04:05:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2000000})

04:05:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:21 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=@routing={0x1, 0x8, 0x2, 0x80, 0x0, [@empty, @rand_addr="ea4a79dc4c9977b2b969c224185efef9", @mcast2, @remote]}, 0x48)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x40}, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x8)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
r6 = accept4$inet(r5, 0x0, &(0x7f0000000140), 0x80000)
splice(r6, &(0x7f0000000180)=0x7, r1, &(0x7f00000001c0)=0xffffffffffffff00, 0x1f, 0xa)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000480)=""/224, 0xe0)
ftruncate(r1, 0x8200)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x6, r4, r2, r3, 0x0)
r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x6, r7, r5, r6, 0x0)
r8 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r9 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$clear(0x7, r4)
r10 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x6, r10, r8, r9, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r2, r6, r8, 0x1)
r11 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r12, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40)
ftruncate(r1, 0x8200)
r13 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0)
sendmsg$sock(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="fe9e98d01354d817c58656fe51c70ef969fcab53f94e3d08df035b6a19d23dd933ceda18afa17d0e8c4d0940871907c58a91d1f10bde9377043137c02cbb4023ed72be108aef94c8051558a47d40a3b63fa3a2304a9c705a7cdc508ccbd9ed84b8054097a7f9c541600f3433464e9f84533c962ffdf732f9a4c1907c6bccf81844b849a2c63ad5b55fa44879bb63b9caa3a6a68b8a4471e36f", 0x99}, {&(0x7f0000000480)="a79a8429a64a1302c86efa5814fb8d817d358cf004fcb5a2cffdc00e325b1974b314b9b58dace5005d95ed76b1558c8b1e28594a0d471d01d008f4b9a6a68b3b7584a731c342d5f347b7e10e93f7785e3d75f438356670d314cba6ebd052ab142fb293175d3add918f5cf7647ed599af1b48b4a64a4f843bf897d09b8c3e15315c1951e67f926e82e44a81d18244f00242fdf0", 0x93}, {&(0x7f0000000540)="31a86c9536d6794d8aee8d0fde1350431d54cc15ead1a6ab3a7e4c5f4857ab3f71738093103703dd9e13896e60608c6e3f944a0545642873e6932eeb9aec5b264299caa94612fbe8383a75d579eaff8eaa344c3128795d32b7f169be3d84bb4f325ff329c3b9a8015f5920371332116f59fa786b99942ec6049a469abc690108f47346fcbd055ddba01398baf27fd075383122b5e24b333d77665c971de6d21a6d0464dccc9eb81731a52eb9af10837549cf821a3309895052a57e63915beb99231df64add840db98a6dd26249e469290838aafa270f7a96f5db95e1c6f2", 0xde}], 0x3}, 0x20000040)

04:05:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2189.054526][ T4333] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2189.067653][ T4335] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=4335 comm=syz-executor.3
[ 2189.081746][ T4333] FAT-fs (loop1): Filesystem has been set read-only
[ 2189.085358][ T4339] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:22 executing program 0:
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x6}, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
ioctl$RTC_PIE_ON(r3, 0x7005)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2189.098008][ T4339] FAT-fs (loop4): Filesystem has been set read-only
04:05:22 executing program 3:
ustat(0x6, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1000000})

04:05:22 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x3a}, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0xa, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x71}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000080)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x4, 0x2}, 0xc)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f0000000000)='./file2\x00', 0x141042, 0x20)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ftruncate(r3, 0x4)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
getpeername$unix(r7, &(0x7f0000000340), &(0x7f0000000180)=0x6e)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
rt_sigreturn()

04:05:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x80000)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/4116], &(0x7f0000000100)=0x1024)
fchdir(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000040))

[ 2189.428870][ T4468] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2189.434930][ T4471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1546 sclass=netlink_audit_socket pig=4471 comm=syz-executor.0
[ 2189.441851][ T4468] FAT-fs (loop1): Filesystem has been set read-only
[ 2189.613889][ T4534] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2189.624044][ T4534] FAT-fs (loop1): Filesystem has been set read-only
04:05:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./bus\x00', 0x6, 0x8, &(0x7f00000006c0)=[{&(0x7f00000000c0)="a0e4f5a1a1730663aa7d129d3464673b14e9fb23a3d95e1da5e002e75e2d4445395a2a241b88aa41de14c1d787884e2848c99ee28c379f8392025d6dcc7bf0be3043f8bb035aee670c180ff0d6a1809a4c3e876c3253d9ead418f174e7b86598dff4a51efc87e4f8e62cf3aedcbfdc63ecdd907cdb7179d26005cd84f5df9b2c99931681ee43f40a196d7d2a610e4296ce52b5eb22860cb132c5b13513bfd29d403f0207902db025615e94f0640685bdce166424bcea10dd15f73d9fb2e98ce25aac40d783fc0ce3392ead991e6f968cbbe1fced9a73c082f5c3e2eca682150503bf2d2355a5abcde33fa56d1b05d7bcf6b02e45acc3d685fa6eb2d5b1", 0xfd, 0x80000000}, {&(0x7f00000001c0)="19fb5bf8c4f7d48aaa180553c6eb7064cbd16f7206ba57801e66c1148d96ee5cd41e39595991a4a8559b6c0a10d355131db521c827e6ed31e460893b1428c58f56102016469358b16e799f951f31d705412cb5526e38ab855fe04e1c45", 0x5d, 0x8}, {&(0x7f0000000800)="d556dddb5d1b7e7ce06b708f6ee0bc9e6303c08136bb0962756e3bc12511a90716ea75f80228aaef7a30952296ab0cefafbfdd6ff16dc579a59033ce05e4c690a7c6ae3d482f283366e28a3909efa8acc03d7b2d93be228a", 0x58, 0xb5e}, {&(0x7f0000000480)="fb472f8a288bb67b38392946b6bc8740ed445be2cd68725d7e1bd76348f24db46be54881581ea5070373ce4357da15e7b36e893556774d19888c972b25901bfd6dd87745f0ad680ca21c342dac7b9aa5f0d845780fa9e7baebf6d31d5f8c01fa1d49c36542d29345d05bf7ad6f59acd610ad53a5572b59d762ca7e5501b2abcb8b3234a99184700516b8ae1a8aee969870daaf0e5d9437c1a4dd68eba9c8efa29c12c173c9493fe8d004939826683f348321209676a8a1fbf41bd14cf47d75ea8c0faa7e", 0xc4, 0x40}, {&(0x7f0000000340)="0675e36666b6336ba3ab7e8a838aa3c41ce08660", 0x14, 0xa71d}, {&(0x7f0000000580)="fdb7048f7e14d62723ce5262696e32ef1b9c5a9dfd58917f9cb207a3925fc5ae240df106a39673c91e3f0ca4be2c4443b334e6e94e2fda2935825495e38acd0928fa2861733e8289c15b263635b3982fa2eccb7aed392b574bbb9b0a049969ac226230cde6fabbd1f23084eb09af006d5b5915b8148664015a0b97822eac79c8e04278a87c334fc6246ff5e8eb7b28daec15c7c7dbe86949558671069b395078c4b3885d530b8ab6a7a9992a632fb40a134fe56b221af2b562247fa72570aed85eb0824723bb79838856e02d45a523ccf27ffae3ddd9bd8ca1", 0xd9, 0x3ff}, {&(0x7f0000000380)="64621c717033ba99d00a91fcec65ce5a9acd94d4e055c98bd48283cc", 0x1c, 0xffffffff}, {&(0x7f0000000680)="585af1438c4ed7521f31d30ee16adc2f54a4043ac2f2d84fee8d7e9f1b1f33139ae212214365b7716fb63bf766ffa6bf1eb9996fa2c755d8513262f3c45840", 0x3f, 0x7ff}], 0x858000, &(0x7f0000000780)={[{@numtail='nonumtail=0'}, {@numtail='nonumtail=0'}, {@uni_xlateno='uni_xlate=0'}], [{@fowner_gt={'fowner>', r2}}]})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)

04:05:22 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@routing={0x2c, 0x4, 0x2, 0x5, 0x0, [@local, @rand_addr="b73cba63f01dd3c28e693a4537d61bf3"]}, 0x28)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000400)='./bus\x00', 0xfffffffffffffffa, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204090002000270f7f8", 0x16, 0xfffffffffffffffe}, {&(0x7f00000001c0)="ae870dc4bae23354af629f1cbc333f3a912c420090ed08e88352b62900d313f3fea2d97be4fa3f028d37a6ff9beb8bf0a2f1809a3b08a25e524de01fccd8366a085a6b930aa9f04f97539e856a5e5fd4113e7533fb", 0x55, 0x69e}], 0x911050, 0x0)
getuid()
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x810040, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x7ff}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]})
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffd, 0x0, 0x1, 0x1}}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x33}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ftruncate(r1, 0x8200)

04:05:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x2040000})

04:05:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x5}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
getsockname(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000100)=0x80)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
read$usbfs(r5, &(0x7f00000000c0)=""/62, 0x3e)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00')
ftruncate(r1, 0x8200)

04:05:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
personality(0x10)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2189.897342][ T4604] selinux_nlmsg_perm: 1 callbacks suppressed
[ 2189.897398][ T4604] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pig=4604 comm=syz-executor.3
[ 2190.005904][ T4658] FAT-fs (loop4): bogus number of FAT structure
[ 2190.015067][ T4658] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1200000})

04:05:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x80501, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
write$P9_RXATTRCREATE(r5, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7)
ftruncate(r1, 0x8200)
ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000))

04:05:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r1=>0x0}, &(0x7f0000000100)=0xc)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r4)
r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5)
keyctl$chown(0x4, r6, 0x0, r3)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r8)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4810000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x7}}], [{@fowner_gt={'fowner>', r8}}, {@smackfsroot={'smackfsroot', 0x3d, '^cgroupeth0#)proc'}}]}})
r9 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r9, 0x8200)

[ 2190.288235][ T4658] FAT-fs (loop4): bogus number of FAT structure
[ 2190.296518][ T4658] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
symlinkat(&(0x7f0000000000)='./file1\x00', r6, &(0x7f0000000040)='./file1\x00')
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

04:05:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000001ac0)='./bus\x00', 0x0, 0x0)
fchdir(r0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001680)={0x0, <r1=>0x0}, &(0x7f00000016c0)=0xc)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r4)
r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5)
keyctl$chown(0x4, r6, 0x0, r3)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001700)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000001a40)=0xe8)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r10)
mount$fuse(0x0, &(0x7f0000001600)='./bus\x00', &(0x7f0000001640)='fuse\x00', 0x98a0, &(0x7f0000000500)=ANY=[@ANYBLOB="66fc8c8a41ccd0643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',allow_other,default_permissions,allow_other,max_read=0x0000000000000200,max_read=0x0000000000000007,blksize=0x0000000000001000,default_permissions,default_permissions,obj_user=dots,d=', @ANYRESDEC=r8, @ANYBLOB=',dont_hash,rootcontext=unconfined_u,smackfshat=vfat\x00,fsname=-wlan1vmnet1ppp0+eth0,)trusted$,smackfshat=,smackfshat=smackfsdef,fowner<', @ANYRESDEC=r10, @ANYBLOB=',\x00'])
r12 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r12, 0x8200)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r13 = openat$full(0xffffffffffffff9c, &(0x7f0000001800)='/dev/full\x00', 0x8500, 0x0)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r15=>0x0}, &(0x7f0000cab000)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
r18 = fcntl$dupfd(r17, 0x0, r16)
ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200)
keyctl$session_to_parent(0x14)
setuid(r15)
fchownat(r13, &(0x7f0000001a80)='./bus\x00', r15, r11, 0x800)

04:05:23 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)="2ef800f1000000000004", 0xa}, {&(0x7f00000000c0)="4d71dd76690315501f6f0d07ae25844cba32566bb7c78d42f9e6b6cda0694ef93051f958c9e6fdf3d9d5f55ad2f5661e16633d3d8d1b064f75e89f038cf32025daab7e30da2ede142d81b2779a18a7a5798325e20521b9d6e23f2317d59e96790872c25f4e0335e8e41219a36d1560e424ff5bfd483cf1bcb7c370dd13353b8e884d2562d6d5a10e4b02ba64c415a3cd0667ed5416545b76aa71bec76090dc785b7c10f76a12dc5a0f7e953a97634cada8ff734d71e616f61f3ad315812815ff74dbd24d5f3205bd8490777e1a5371fdbe51f5e1695d835b", 0xd8, 0x3ff}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x200)
ftruncate(r1, 0x8200)

[ 2190.707722][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.717953][ T5000] FAT-fs (loop4): Filesystem has been set read-only
[ 2190.725892][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.737747][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.763142][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.774544][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.786750][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.798341][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e153a00000000000002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:23 executing program 0:
syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x80000)
r0 = socket$inet6(0xa, 0x1, 0x40)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local}, 0x1c)
recvmmsg(r0, &(0x7f0000000100), 0x0, 0x5f546761ddb2130a, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x23)
r6 = syz_open_procfs(r5, &(0x7f0000000080)='net/ip_tables_targets\x00')
ioctl$RTC_AIE_ON(r6, 0x7001)

04:05:23 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x3000000})

04:05:23 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
mlockall(0x3)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2190.809593][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.820246][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.836058][ T5088] FAT-fs (loop1): bogus number of reserved sectors
[ 2190.843221][ T5000] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2190.847617][ T5088] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2190.914271][ T5094] FAT-fs (loop3): bogus number of reserved sectors
[ 2190.916082][ T5088] FAT-fs (loop1): bogus number of reserved sectors
[ 2190.929685][ T5094] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2190.929746][ T5088] FAT-fs (loop1): Can't find a valid FAT filesystem
04:05:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r7 = getpid()
sendmsg$nl_route(r3, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r8=>r6})
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0xc24, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_BEACON_HEAD={0x479, 0xe, "9160d374ff851c5c51b805cc313291df1df36af24b539eab6536fea396f8e45d5ff5a2b464fe9baec60777f1b9cf822e000296cf2734788e2408de50dc269b63dc34123adcbcbe8584ea3fcb602e890906854f37b05ca9780facda8e544a311a91eec3b1836b1e36505f1685adf55917d46c1e1910a86bdd442cf2f9beac47f5c33ba6fae9001f7a8e19ac7dc93e7ca40e35ba46baa21addbaea5e3d77d79a45ce062a8666fd8911f5faa2c58f41aaa79c557f0a79b9cc5e47a46f810cb547085ff489a937d74dff2bc427e5fcd521e34a6320fc0c2ea4b8d5c6714b9d6a3c196ce2856b8e37bafe9dd9f7946bc6887e0357f8ecc8de94432aae1d652717f13c224f50898c74cfb4b92df9d57b2d4d73747470473746b63bd2356d68641ad091e0b7e47b84d254463790d42e489fade6893f695e78ab4194f00f3dd8a10b769b401484e4d207744ceeedd43e052da3eef665b70043526d1f6ee16018a52b6beb99dcfcb1e754f56e939dda701be100c9432f9248b4c4bbf4b239f644ac408630b83dacd7acab2bc8166a4f6721cf197c0fe05e4eee48b01058721a55d1f759dc6fc30211f4fa83b2487d4e7c280d469655e60ed6169d128a30e55dfb7569fb62feab7bf493348595500c77d9209e2468e3e7e0fa6848a9a2d4bc9c9dce7fcfcae78aa99aa2aa7bda49dd392c33023ff8896512cbb9736de4a8586d1b5d4dd47351302a78b32890cc0fa8868bc269bdcaa2182f964dbbd4f33e06f1c697b53825863813105564d60a7905bf09657dba072252daf26cf12a5ebb64c6782488094ab1182a834620789a5387aaa545d374bf2e33c1317065620a9b32bd2c2ede3e344ecadab7855faebfd873ad914b370a88df03ce480585005aa491417169003f60bfe5e3f746507282fc292bb0132e6e86324f0cd30b253a50d1f5ba2b8dbd33f5b0211b3a0aaccd34fa983e7b845b015f61befbb26e9e73935f230ba3c75928d7851897914234d363e9476b0bf1ce81d0cf1cc58c9dff12cac2430635856794e8a48ae2c9fa88c338bc813a66db4a23dd00a2d1643dbd8735c5a81bb003ce480dffb3eb78c9438563df4a1efd5c08f570c9d13ba3328087d8717f2992400a721cbf2bc1666e9abb00b865ebed9cb9988388a635203ff91cacd1ea515d74a29627eaa8be692927f0c838b3f9323eac060da2a904f362db63a24970ecd2bc3710970f7fbd4da63f191b379408385a7c51b3a8bf1112fd3c9b81f445dc12ab1bc8ea40c47f531b59cc37ea79c08a1016e6c89f29445ca288e463913902ccbc89caaf9bb633dfda7f72293da533bf5930ab2a5b68225e8c78cc3c165bb1e4a6f0479a3b5e70e206630c073139932785c7236b0718614b55fe29859de08b174b77ff3a0d7bf47138c9c7283412aa27059fe4a4c902d8d112ab991cabd7d70b5d342792a102b4c65ec070d0b3142443be4a649df40d8a0215dcceb6493c469366586bf31c45c6ced7b816d8e4e8584a31657255049f262aaf183d8fbc5403ba6d6b83800e3241d8cabbd4668a0a178460b39a208cfc7477dc970b9820a5ce577f1320583ecc22b81cf2a7734ad0fcaf3b7901b2af3e160a08"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IE={0x76e, 0x2a, "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"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}, @NL80211_ATTR_SSID={0x5, 0x34, "e2"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}]}, 0xc24}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r10 = dup2(0xffffffffffffffff, r9)
ioctl$RNDGETENTCNT(r10, 0x80045200, &(0x7f00000001c0))
r11 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fsync(r11)
r12 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
socket(0x3, 0xa, 0x3)
ftruncate(r12, 0x8200)

04:05:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x2000000})

04:05:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x27}})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat(r3, &(0x7f0000000000)='./file2\x00', 0x8000, 0x152)

04:05:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffff2807, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/132, 0x84)
fchdir(r0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180), 0x4)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r6, 0x8200)

[ 2191.306269][ T5231] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[ 2191.323620][ T5231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pig=5231 comm=syz-executor.1
04:05:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000000)={0x11, @rand_addr=0x4, 0x4e20, 0x1, 'wlc\x00', 0x20, 0xba, 0x54}, 0x2c)
r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r4)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)

[ 2191.370395][ T5348] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[ 2191.389853][ T5348] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pig=5348 comm=syz-executor.1
04:05:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)

[ 2191.419713][ T5353] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2191.429765][ T5353] FAT-fs (loop1): Filesystem has been set read-only
[ 2191.457181][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:24 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
mlockall(0x3)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2191.470327][ T5262] FAT-fs (loop4): Filesystem has been set read-only
[ 2191.480137][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2191.490123][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2191.500360][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2191.510172][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2191.530641][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2191.542860][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2191.557506][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2191.561586][ T5361] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
04:05:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000001)
fchdir(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

[ 2191.573919][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2191.576679][ T5361] FAT-fs (loop1): Filesystem has been set read-only
[ 2191.586343][ T5262] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0), 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
creat(&(0x7f0000000000)='./file1\x00', 0x171)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2191.681328][   T22] kauditd_printk_skb: 13 callbacks suppressed
[ 2191.681335][   T22] audit: type=1107 audit(2000001924.622:10483): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x4000000})

04:05:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2191.796680][ T5482] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2191.809881][ T5482] FAT-fs (loop1): Filesystem has been set read-only
[ 2191.827230][ T5484] FAT-fs (loop3): bogus number of reserved sectors
[ 2191.835947][ T5484] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x27}})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat(r3, &(0x7f0000000000)='./file2\x00', 0x8000, 0x152)

04:05:25 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x2040000})

04:05:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x300001e, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0xa0083, 0x14d)
r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8203)
unlinkat(r0, &(0x7f0000000140)='./file1\x00', 0x200)
accept4$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x80000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000000c0))
prctl$PR_CAPBSET_READ(0x17, 0x22)

04:05:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendfile(r2, r0, 0x0, 0xfb0)
ftruncate(r1, 0x8200)

[ 2192.132584][ T5572] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2192.152572][ T5572] FAT-fs (loop1): Filesystem has been set read-only
04:05:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="75faa34d1fed7e3803a6cbae7365722e76666174df"], &(0x7f00000000c0)='em0(vmnet0self\x00', 0xf, 0x1)
ftruncate(r1, 0x8200)

[ 2192.270809][   T22] audit: type=1107 audit(2000001925.212:10484): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2192.282900][ T5679] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2192.299393][   T22] audit: type=1107 audit(2000001925.242:10485): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffff2807, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/132, 0x84)
fchdir(r0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180), 0x4)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r6, 0x8200)

04:05:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:usbtty_device_t:s0\x00', 0x25, 0x3)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2192.299606][ T5679] FAT-fs (loop1): Filesystem has been set read-only
04:05:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffff2807, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_security(0x11, r1, &(0x7f00000000c0)=""/132, 0x84)
fchdir(r0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180), 0x4)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r6, 0x8200)

[ 2192.359741][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.369444][ T5606] FAT-fs (loop4): Filesystem has been set read-only
[ 2192.377405][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.389221][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.399585][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.409913][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.419687][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.431945][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.462962][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.473699][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2192.487173][ T5606] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x5}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
getsockname(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000100)=0x80)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2192.522539][ T5744] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2192.533644][ T5744] FAT-fs (loop1): Filesystem has been set read-only
04:05:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340))
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$FICLONE(r1, 0x40049409, r4)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x800000, 0x4000010, r4, 0x31910000000000)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)

04:05:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x5000000})

[ 2192.728211][ T5852] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2192.744333][ T5852] FAT-fs (loop1): Filesystem has been set read-only
[ 2192.979682][   T22] audit: type=1107 audit(2000001925.922:10486): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x5}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
getsockname(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000100)=0x80)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:25 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x3000000})

04:05:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./bus\x00', 0x6, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eb3c906d8d66792e66617400020401000200021cd5ccf7140f72cc41d770f7f819f6c9624c2b710e653f73ef4cc1fe710df5618e3d89508663d1d48f3633578f3ceac8cc0863df7dc8b4774f84a7bba69a93309b770975fdbcc05ba6a794353307c5ede53b5a7ebd303792bf2d8dc3fd6d2cbbe8be45b039a7a5ba1742a7dd41774d35517a792295c8fe916fb0e012c5481877ca8d031d977ce855f1db4354e21fa1fcae3323736efbea1ce5f3ee1a42fe44acc4ebfa0ae6a167d25dbd6cdf0fd0c7f0a5ee44f800002000", 0xcb}, {&(0x7f0000000040)="dd3954ba02a361f9bbf12178992692eab7e76117c02a30042aa55baa1fcc0d822578e13d17bb", 0x26, 0x6}], 0x0, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

04:05:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x4000, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xa4800, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x1, 0x7, 0x4}}, 0x28)
ftruncate(r1, 0x8200)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000480)='vfat\x00 \x14\xd7\x0e\xf8\t\xcc\xe5f\x9bH\x03\xfe.\xb0R\xf0\x9ck\xb1\xa9G1D\\i\x9dhTt+?\xf1\x83&Y\x1f\xb0\xff\xe7\xb0\xb7#1op\x98\xda\x81\xa4\x98-M\xf9\xd5L\xb5\xa9%\x98|\x18\xb0A\x89g\xcf\x124\xf4\x9b7{\x94\x9a\xbf\xd5\xa5\xd6\xc8\xa9\xe3\x823g\xb03D\x85x\x03&\x9c*\xe4\x15\xe1\xc3y%\xdc|g\x8a\xea\xec\xf3@\xa5(A\xca\x14\xbf\xfb\x1d\xd6\xf99\x1bqI\xae\xe1#o\xd9\x15+\x9f`k\xcf\x8d\xb8\x97#f+\x8e\x8e3T\xa9\xe5;6o\x1fMq\xce\xfa(V\xc0yW\xf3\xee\x96\xd2\xf2\xcf\xbd7.q\x8a]6\xed\x80<3\xbc1\xcc\xda\x7f\r[A\xcf\xa4\x1a\xf4\xc7\xa6j\xf8\xfe\x8b\xe6c\xe6a\x05T\x1e\xbc\x92\x88\n\xb2\xc5\xe8\xfbx\x82.R\x8c\xaf\xb6\xa0\xa8\x1au\x92\x15\xff\xdc\xca\xed\xfe\xc4\x0f\xcc{@\x1a/5\xe6R\xc7\x92u`\t\xbd\x84H\x1a\xa3E\x82\xa7g\xd3)Kw\x98j\xc9\xcf\xee\x05\xef\xcf\xf9P\xd1\x13\xfd\x90_j\xf0*\xa6x.\xf49]\x0e\xb8\xe6\xc9\xc6%?y\r\x9c\xfa?,3\xd2\x95\xdaj', r0}, 0x3)
readahead(r3, 0x51, 0x3c)

[ 2193.066202][ T5979] FAT-fs (loop3): bogus number of reserved sectors
[ 2193.073919][ T5979] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2193.111185][   T22] audit: type=1107 audit(2000001926.052:10487): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2193.113981][ T5979] FAT-fs (loop3): bogus number of reserved sectors
[ 2193.136013][ T5979] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2193.144270][   T22] audit: type=1107 audit(2000001926.052:10488): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2193.179018][   T22] audit: type=1107 audit(2000001926.122:10489): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)

04:05:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x40, 0x0, &(0x7f0000000040), 0x384483d, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100))
fchdir(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

04:05:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000500)='./bus\x00', 0xc8)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000480))
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file1\x00', 0x81, 0x3, &(0x7f0000000340)=[{&(0x7f0000000100)="f9d21c", 0x3, 0xfffffffffffffff9}, {&(0x7f0000000240)="5c919dca156899554d437c9c5a4429897b303b1a71d9104ddecb9e55696b979a4fbdbbf35e6e5981b591cdeb343ccb7845b58ee4e93dba8c87f75d751d57ec82c063444d5729045ad4599653829c38a823e7ce715846759a9e7efcf37f2d4f8d0755cd8c85d8c5630bbc46fab7726bb5b9cac947da81b1", 0x77, 0xfffffffffffffffd}, {&(0x7f0000000180)="5cf9a517215826c5a1664dd718e9e2acab26", 0x12, 0x3f}], 0x108100c, &(0x7f0000000540)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d6d697865642c73686f72746e6177653d77696e39352c6e6f6e756d7461696c3d302c726f6469722c6e6f636173652c7574383d302c7375626a5f747970656e2c666174002c646f6e745f6d6561737572652c00a13f3bf8ad32cdfef1287ff2f31b2b4d06dad6270abca85096df4967fa24"])

04:05:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340))
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$FICLONE(r1, 0x40049409, r4)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2193.322781][   T22] audit: type=1107 audit(2000001926.262:10490): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340))
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$FICLONE(r1, 0x40049409, r4)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x5}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
getsockname(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000100)=0x80)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2193.440558][   T22] audit: type=1107 audit(2000001926.382:10491): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:26 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x6000000})

04:05:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'system.', 'systemvmnet0/selfwlan0&user\xe2(trusted\x00'}, &(0x7f00000000c0)='vfat\x00', 0x5, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = getpid()
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000200)={&(0x7f0000000100)="be99fb4283ccbb85b005faf3b6f5cf365b8fad63adf265f04a23e028830a0993dcf34d48aaa3d290022389c2c6c7565c6491140d77957736547e0c3eb5d6b32bba9cee53d2ca0c46b83106b35ee0f89ecc323bec4fcca5350152b25dbd1684fe306283a9a9ddcbb827701dbc8c8ae5a085d811703c2b45e210500ff679b2645bb6f61aec1c2e7aab724f864f76d688d6099809910a262d37190258ff16482b083f4efdab140aa035ac837e756aea0ba8314417478606eb0c8f26d8ed70b1cac71120aaffbb8d6f26b6c18e6475832b97de5ef8", 0xd3})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x18)

[ 2193.694733][   T22] audit: type=1107 audit(2000001926.632:10492): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2193.727764][ T6351] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2193.796334][ T6351] FAT-fs (loop1): Filesystem has been set read-only
04:05:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:26 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x5000000})

04:05:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x4000000})

04:05:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000000)='./file1\x00', 0xfffffffffffffffe, &(0x7f00000000c0)=@v2={0x5, 0x2, 0x6, 0x6, 0x68, "137ebf0eb95b062c95078dd4caed6eb3e1188cfb670d949a16f36b29e2606b64511e609ec41427d0c9d980f4239fccc664443da466ecbfc988c5d3077655eb1b3827d114e0adabb853fa3cde0a7ec984d61f9f831abf8cbe4d229c1f44499170a3888670cdc06b98"}, 0x71, 0x1)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0), 0x290003c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
ptrace$setregs(0xf, r1, 0x90, &(0x7f0000000000)="34749d2c41bb4601e1c65add077cc3cd8babb4bdfdb3ae8b3cd9bf9a7b543a4a7cc0a04a0cea15bb9394201e274feb669fc49c0f28b9ce1a585953c9ade31d3baf2fa46733a0fca10f3cb88a57510a644e66d6631b0e0625104ee0aa125043740560")
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x23)
fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x1, r4})
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3)

04:05:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000e0bd6d45000000000000000100fbea0000000000000000000a"], 0x28}}, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x3})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x3)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$KDDELIO(r6, 0x4b35, 0x1)

04:05:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f00000000c0)='./bus/file0\x00', 0x1, 0x1b2)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005304060000080000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0x8}, &(0x7f0000000040)=0x28)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3)
ftruncate(r2, 0x8200)
r3 = gettid()
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4000, 0x0)
ioctl$RTC_WIE_ON(r4, 0x700f)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
tkill(r3, 0x23)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)=r3)

[ 2194.031002][ T6477] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2194.041012][ T6477] FAT-fs (loop1): Filesystem has been set read-only
04:05:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xffffffffffffffff}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0/../file0\x00'}, 0x10)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x202042, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
ftruncate(r1, 0x8200)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

[ 2194.338108][ T6488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48608 sclass=netlink_audit_socket pig=6488 comm=syz-executor.3
04:05:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000100))
ftruncate(r1, 0x8200)

04:05:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x6040000})

04:05:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x5000000})

04:05:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2194.798413][ T6708] FAT-fs (loop1): bogus number of reserved sectors
[ 2194.808620][ T6708] FAT-fs (loop1): Can't find a valid FAT filesystem
04:05:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)

04:05:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
read$usbfs(r5, &(0x7f00000000c0)=""/62, 0x3e)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00')
ftruncate(r1, 0x8200)

04:05:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x15}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
membarrier(0x40, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$TIOCGICOUNT(r4, 0x545d, 0x0)
fchdir(r0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x7ff, 0x2}, {0x3, 0x1ff}, {0x7ff, 0x101}, {0x7ff, 0x8}, {0x83, 0x2}, {0x5, 0xa689}]})
ftruncate(r5, 0x8200)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x4e23, @multicast1}})

04:05:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xffffffffffffffff}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0/../file0\x00'}, 0x10)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x202042, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
ftruncate(r1, 0x8200)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

[ 2194.888138][ T6708] FAT-fs (loop1): bogus number of reserved sectors
[ 2194.895275][ T6708] FAT-fs (loop1): Can't find a valid FAT filesystem
04:05:27 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
fcntl$setpipe(r0, 0x407, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2194.990467][ T6736] FAT-fs (loop1): bogus number of reserved sectors
[ 2194.998471][ T6736] FAT-fs (loop1): Can't find a valid FAT filesystem
04:05:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2f, 0x4, 0x0, {0x5, 0x0, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f)

04:05:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000000)='./file1\x00', 0x10e)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005304060000000000000000000000000a14000000e111000100000000000000000000269c39d51716456ac80000"], 0x28}}, 0x0)
r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10)
faccessat(r10, &(0x7f0000000180)='./file0\x00', 0xc1, 0xa00)
r11 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ftruncate(r11, 0x8001)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2195.116851][ T6736] FAT-fs (loop1): bogus number of reserved sectors
[ 2195.125085][ T6736] FAT-fs (loop1): Can't find a valid FAT filesystem
04:05:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000040)='./bus\x00', 0x182)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x240086, 0x11)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2195.232864][ T6972] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2195.242742][ T6972] FAT-fs (loop1): Filesystem has been set read-only
[ 2195.282974][ T6890] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2195.295793][ T6890] FAT-fs (loop4): Filesystem has been set read-only
04:05:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x7000000})

04:05:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x6000000})

04:05:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005304060000000000000000000000000a140000001100010000000000000000008000000a"], 0x28}}, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2180, 0x0)
r8 = open(&(0x7f0000000140)='./bus/file0\x00', 0x30202, 0xa)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000180)={0x8001, 0xd, 0x1, r8})
write$FUSE_IOCTL(r6, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x5, 0x0, 0x975, 0x7f}}, 0x20)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x1, 'veth1_to_hsr\x00', {}, 0x1000})
ftruncate(r1, 0x8200)
creat(&(0x7f0000000000)='./file0\x00', 0x8)

04:05:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040044}, 0x20048042)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000040)='./bus\x00', 0x182)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000a14000000110000000000000afdffffffffffffff00000000"], 0x28}}, 0x0)
r5 = dup2(r3, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000100)={0x401, 0x0, 0x100, 0x1, 0x12, "3f9c6df79967f74a"})
r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = dup2(r10, r9)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r11, 0x40485404, &(0x7f00000001c0)={{0x0, 0x0, 0xfffffffb, 0x2, 0x6}, 0x1, 0xfffffe0000000000})
r12 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x4030000)
r13 = dup2(r12, r7)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r13)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r13, 0x80605414, &(0x7f0000000140))

04:05:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x4b}], 0x381002c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x80000, 0x4)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2195.757273][ T7095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7095 comm=syz-executor.3
[ 2195.782070][ T7097] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2195.797424][ T7097] FAT-fs (loop1): Filesystem has been set read-only
04:05:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
getresgid(&(0x7f0000000040), &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100))
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1000)
getgroups(0x1, &(0x7f0000000200)=[<r5=>0xee00])
stat(&(0x7f0000000240)='.\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r10 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r9)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r10)
keyctl$chown(0x4, r11, 0x0, r8)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{0x8, 0x4, r3}, {0x8, 0x6, r4}, {0x8, 0x5, r5}, {0x8, 0x2, r6}, {0x8, 0x0, r8}], {}, {0x20, 0x4}}, 0x4c, 0x2)
ftruncate(r1, 0x8200)

[ 2195.846205][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2195.860075][ T7118] FAT-fs (loop4): Filesystem has been set read-only
[ 2195.867429][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2195.876414][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2195.886247][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2195.895526][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2195.904713][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2195.913705][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2195.922847][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2195.932062][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./bus\x00', 0xfffffffffffffffa, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
open_tree(r5, &(0x7f0000000040)='./bus\x00', 0x80101)
ftruncate(r1, 0x8200)

[ 2195.941239][ T7118] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = dup(0xffffffffffffffff)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000100)=0x9)
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x2a3d, 0x280fc163})

04:05:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x10010, r5, 0x0)

04:05:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x8000000})

[ 2196.258826][ T7353] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2196.277957][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.280860][ T7353] FAT-fs (loop1): Filesystem has been set read-only
[ 2196.294140][ T7357] FAT-fs (loop4): Filesystem has been set read-only
[ 2196.301408][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.310569][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.319310][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.329243][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.337961][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.346885][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.355615][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.364633][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.379796][ T7357] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x6040000})

04:05:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x20000)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4020080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x86}]}, 0x30}}, 0x20000884)
ftruncate(r1, 0x3ff)

04:05:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000040)='./bus\x00', 0xa1)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)

04:05:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)

04:05:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8000)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
write$FUSE_STATFS(r4, &(0x7f0000000180)={0x60, 0x495a93fefca4241e, 0x1, {{0x3, 0xfffffffffffffffd, 0xffffffffffffff80, 0x7, 0x7fff, 0x4, 0x6, 0x9}}}, 0x60)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2440, 0x0)
getsockopt$netlink(r6, 0x10e, 0xc, &(0x7f00000000c0)=""/152, &(0x7f0000000040)=0x98)

04:05:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x85}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2196.807433][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.816874][ T7499] FAT-fs (loop4): Filesystem has been set read-only
[ 2196.837768][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2196.849935][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.863168][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.872682][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.882466][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.894505][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.907274][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.916996][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.928135][ T7499] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2196.931199][ T7511] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2196.950219][ T7511] FAT-fs (loop1): Filesystem has been set read-only
04:05:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x5)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
fcntl$addseals(r6, 0x409, 0x0)
setsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000000)="d06ce4ac7ea111b20e97fbf38b39d924ebc7963487e2f8ef3d563733617d3d8e1b3b33e9318a1acbc0453bb0b210f15486bb64ddece1f38a96bd3d8b53f9f0be459a6c5726e0644734f20ed867850c6f3be59a24b7dea37085948b0a64002663b9ca5593d4a874", 0x67)
r7 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000000100)={{0x1, 0x0, @descriptor="b42ec405e09e8221"}, 0x98, [], "b88d64205d4572878bcd9fd7fb12631804654a5aea3606590fdba14a1d7b2bfad41aa55b2eb69e8f5abb10a1537937981d83e7981af7d03a9b5ee30ed680e7d17ab64f37a6fa48ef484477522e53cb18651b258f5122a9e0633519b5e0e6996040ddc528e8db50a6198c8ba7a4e8cba883d9572bfffce6e313803aeb42bcc51580b1f7433fbcb7d28b128baa9a6870e3a0130a4a92fc84a7"})

04:05:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000280)='./file1\x00', 0x17d)
mkdir(&(0x7f00000000c0)='./file1\x00', 0x90)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f0000000700)='./bus\x00', 0x84000, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$FUSE_LSEEK(r2, &(0x7f0000000040)={0x18, 0x0, 0x8, {0x34}}, 0x18)
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
execve(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000340)='vfat\x00'], &(0x7f0000000680)=[&(0x7f0000000580)='vfat\x00', 0xfffffffffffffffd, &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='system,/\x00', &(0x7f0000000640)='vfat\x00'])
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000005304060000000000000000000000000a1400000011000100000000000000000000000ace5170d0cae128d744196308695c2956fa6d7cbb1a09002770f578be5d272921bf10f825d23bf7a2cd4828aca5d59cfeae9c3a99f3d59052ab09be371611c2699b89b8a9ece9264f1a8763acb0"], 0x28}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000480))

04:05:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x20000, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x12b)
r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
io_uring_enter(r5, 0x56, 0xe6, 0x2, &(0x7f0000000000)={[0x8]}, 0x8)
ftruncate(r1, 0x8200)

[ 2197.124258][   T22] kauditd_printk_skb: 8 callbacks suppressed
[ 2197.124266][   T22] audit: type=1107 audit(2000001930.062:10501): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2197.165129][   T22] audit: type=1107 audit(2000001930.062:10502): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2197.198998][   T22] audit: type=1107 audit(2000001930.092:10503): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x9000000})

04:05:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:syslog_conf_t:s0\x00', 0x23, 0x3)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', r0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)
write$selinux_user(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a69706d695f646576c0d6655f743a73302073746166665f7500"], 0x2b)
fcntl$setflags(r5, 0x2, 0x1)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x600, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000000)
nanosleep(&(0x7f0000000380), &(0x7f0000000480))

[ 2197.227365][   T22] audit: type=1107 audit(2000001930.092:10504): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2197.317576][   T22] audit: type=1107 audit(2000001930.262:10505): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2197.366982][   T22] audit: type=1107 audit(2000001930.312:10506): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2197.367155][ T7749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1549 sclass=netlink_audit_socket pig=7749 comm=syz-executor.1
[ 2197.417295][ T7756] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2197.426258][ T7756] FAT-fs (loop1): Filesystem has been set read-only
04:05:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x7000000})

04:05:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fstat(r0, &(0x7f0000000000))
ftruncate(r1, 0x8200)

04:05:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x2, 0x25, 0x1, 0x30000000}})
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
sendmmsg$sock(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@llc={0x1a, 0x6, 0x0, 0x1, 0x3, 0x34}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)="f68548335603e6823d6cf5454ed0d636a470f9c23604e23dd936581a2a4f2f5394a5ee9166894e0aff7fe7a3bbb2c95637b548222047c24eafe0e0d23d73e85cb73838407119e9e62baf510eb7eeb051a5d73e29730893ed825ef897497d1e25628b72af8e0e35310191aa4ce04b52a88c2a1c8cfe5d29de7369", 0x7a}, {&(0x7f0000000140)}, {&(0x7f0000000180)="8cb188a396c4fe84200817961191cbd0ad6bbeb21e48a09efefed738e134a267e988ecfd0e14093a165d75356c8bb0efa43175ec35b564c0c74e957d97f8c114e8fd8ac5beef98ce392dff8c0d5cfc632bf3f13b7f11b0bf232cc4302d2ef35982bcf5d03fe2e54ee629d66b987b2995bac7ca3b55e9246ffee5f63b72a02caed68932ba838cb6aa66129ddfc85f8fdf564e9b89b872677d60d3b3ea12ff276118ccad3f58dabbc50b610e2930080c45042439613f7d1707d1586ab8a07551198242f3e0291566577cffe873cffa5247141590d0005457dafe56d7ef", 0xdc}, {&(0x7f0000000480)="59a59fa2f61c8ea6781bbe33884ed35fb05cb85f93699b817d3817241827a1b6dc4f5908006e657c8e46ba75b07d4516b371b8cfff7bfdcdc6362d7f932f5e30af44e087800b9e10f009aff5ca9e67144ac3e0e72a5134e376026be956d63ce4771f54c6d9d6a639bdd553215dbd44b765dde2b936275b6100263af8f5e29549b19e94fdc320adc515600bcab42e51dbe78ee5b534703f50381b47c8848c93a31fd4d3b261e80dea5e968e45af01ea8c57d009a057f9837148b7af98", 0xbc}, {&(0x7f0000000340)="9e3e996f010570aab677234a869d0adb0731920490691d542a37c80ccaa0c8a3a25056cb084205caaa2ae6afa30f8c0f761b0806892bae8815c5022506bd0b0f7548cd5c49e6d3e6", 0x48}, {&(0x7f0000000540)="f39b25c07ef560c99e62d9fbfecc7fae73d85dd87e27f3564b4ac61cb8a580fc1fbadfcaf0f7ee92987b294730b32c6e278db32465a2ceeba9f9401964e4f976883b3682e0b0d5", 0x47}, {&(0x7f0000000280)="fb899f8c934f02463f47", 0xa}], 0x7, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x48}}], 0x1, 0x20000015)
fchdir(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)

[ 2197.908843][   T22] audit: type=1107 audit(2000001930.852:10507): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000040)='./bus\x00', 0xa1)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)

[ 2198.091240][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.100528][ T8092] FAT-fs (loop3): Filesystem has been set read-only
[ 2198.107581][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.116797][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.125782][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.137142][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.146962][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.157105][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.167240][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.176908][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:31 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0xa000000})

[ 2198.187352][ T8092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000040)='./bus\x00', 0xa1)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)

04:05:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r11 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r10)
r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r11)
keyctl$chown(0x4, r12, 0x0, r9)
chown(&(0x7f0000000000)='./bus\x00', r7, r9)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x8000000})

04:05:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000040)='./bus\x00', 0xa1)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)

[ 2198.672430][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.691250][ T8320] FAT-fs (loop3): Filesystem has been set read-only
[ 2198.705478][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.726229][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.757610][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.776500][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.794507][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.813146][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = dup(0xffffffffffffffff)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000100)=0x9)
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x2a3d, 0x280fc163})

[ 2198.833132][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.852023][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2198.870033][ T8320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r8, 0x8200)

[ 2199.029873][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2199.038820][ T8433] FAT-fs (loop3): Filesystem has been set read-only
[ 2199.047209][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2199.056739][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2199.066152][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002740)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000ffffff7f00000000280593bd5d74dafc20380003"], 0x39)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = dup3(r2, 0xffffffffffffffff, 0x80000)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4001040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x14, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8)
r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = dup2(r7, r6)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8)
recvmsg$can_raw(r8, &(0x7f0000001480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x5}, 0x103)
recvmsg$can_raw(r9, &(0x7f0000002700)={&(0x7f00000014c0)=@isdn, 0x80, &(0x7f0000002640)=[{&(0x7f0000001540)=""/57, 0x39}, {&(0x7f0000001580)=""/176, 0xb0}, {0xffffffffffffffff}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x4, &(0x7f0000002680)=""/117, 0x75}, 0x40010143)
fchdir(r0)
r10 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r10, 0x8200)

[ 2199.075532][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2199.085212][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2199.095488][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2199.106446][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2199.116315][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0xb000000})

04:05:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./bus\x00', 0x6b5, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204359838c56d24cf3e", 0x16, 0x6}, {&(0x7f00000005c0)="12b6561a23e475d0871d4a7f0c2ea3435b62c1ac8962034cb31d322a56eab0d9bc6764d9feb846e842284065b61188a4158c0955a38311b33d33caad7b8f35fce7d37eec7643b107d6085da4c19afb64a9361d2d1ff4895ed21f1047b977122b4db186b87ef1ed8ae52a4c35ab3224483f2f2099fa906f1f50b254f525577a48b6839dd16a04818af9a60af969d22fa632806116aa42fdbe106564ed6ef816b3b7675c45536c4daa2dcc872eeceed2bb9a7db4dfe2c9ec40aa7a20f8fe5daf0cd067e534537ba8efa5217dc1af5a70e4de72733f034cdefd3799dd3b61612b98e1d33842c189345039f0cbba6031d4d9c1c247f2872107f2c89a879e184eaaad200a5a3457ae2b6912c0ca3894339895d0c454341906efc883453fef7848659e2be46fba9cc61293854c9c1c47c3446b5df4771cfd01982fc27a1b67dadd", 0xb7, 0x2000000010003}], 0x382002c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x7}, 0x18)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
sendto$unix(r4, &(0x7f0000000040)="a310565cc15bca71951a6482c01b25625a1a39b84924e1bbb1a52225622384a628ae88b52acea7ea8043e6f181955b1a6e0e", 0x32, 0x0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
socket$inet6(0xa, 0x6, 0x5)
ftruncate(r5, 0x9)

[ 2199.125842][ T8433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xc3)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

[ 2199.235310][ T8555] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2199.244329][ T8555] FAT-fs (loop1): Filesystem has been set read-only
04:05:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./bus\x00', 0x6b5, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204359838c56d24cf3e", 0x16, 0x6}, {&(0x7f00000005c0)="12b6561a23e475d0871d4a7f0c2ea3435b62c1ac8962034cb31d322a56eab0d9bc6764d9feb846e842284065b61188a4158c0955a38311b33d33caad7b8f35fce7d37eec7643b107d6085da4c19afb64a9361d2d1ff4895ed21f1047b977122b4db186b87ef1ed8ae52a4c35ab3224483f2f2099fa906f1f50b254f525577a48b6839dd16a04818af9a60af969d22fa632806116aa42fdbe106564ed6ef816b3b7675c45536c4daa2dcc872eeceed2bb9a7db4dfe2c9ec40aa7a20f8fe5daf0cd067e534537ba8efa5217dc1af5a70e4de72733f034cdefd3799dd3b61612b98e1d33842c189345039f0cbba6031d4d9c1c247f2872107f2c89a879e184eaaad200a5a3457ae2b6912c0ca3894339895d0c454341906efc883453fef7848659e2be46fba9cc61293854c9c1c47c3446b5df4771cfd01982fc27a1b67dadd", 0xb7, 0x2000000010003}], 0x382002c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x7}, 0x18)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
sendto$unix(r4, &(0x7f0000000040)="a310565cc15bca71951a6482c01b25625a1a39b84924e1bbb1a52225622384a628ae88b52acea7ea8043e6f181955b1a6e0e", 0x32, 0x0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
socket$inet6(0xa, 0x6, 0x5)
ftruncate(r5, 0x9)

04:05:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

04:05:32 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x9000000})

04:05:32 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x1000, "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"}, &(0x7f0000000180)=0x1024)
ftruncate(r2, 0x8200)

04:05:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getrusage(0xffffffffffffffff, &(0x7f00000000c0))
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)

04:05:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x81)
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x6, r4, r2, r3, 0x0)
r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00')
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x6d4, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {0xa, 0x0, @broadcast}, {0xa, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x0, @broadcast}, {0xa, 0x0, @dev={[], 0x3d}}, {0xa}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_PROBE_RESP={0x658, 0x91, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}]}, 0x6d4}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r9 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x6, r9, r5, r8, 0x0)
keyctl$unlink(0x9, r4, r5)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r10 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r11 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000240)="9b3d8d350fa83cdec9009115a20a", 0xe, 0xffffffffffffffff)
r12 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r13 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r14 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x6, r14, r12, r13, 0x0)
keyctl$search(0xa, r11, &(0x7f0000000280)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, r13)
fcntl$setstatus(r10, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r10, 0x8200)
write$cgroup_type(r10, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2199.559995][ T8577] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2199.569293][ T8577] FAT-fs (loop1): Filesystem has been set read-only
04:05:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r8, 0x4, 0x6100)

04:05:32 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x1000, "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"}, &(0x7f0000000180)=0x1024)
ftruncate(r2, 0x8200)

[ 2199.759749][ T8720] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2199.766145][ T8722] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pig=8722 comm=syz-executor.4
[ 2199.768584][   T22] audit: type=1107 audit(2000001932.702:10508): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2199.790142][ T8722] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2199.797578][ T8720] FAT-fs (loop1): Filesystem has been set read-only
[ 2199.825199][ T8722] FAT-fs (loop4): Filesystem has been set read-only
[ 2199.931411][   T22] audit: type=1107 audit(2000001932.872:10509): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2199.941927][ T8729] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pig=8729 comm=syz-executor.4
04:05:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0xc000000})

04:05:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @loopback}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004811)
ftruncate(r1, 0x8200)
ioctl$TCFLSH(r1, 0x540b, 0x1)

04:05:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

04:05:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x23)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r2=>0x0})
tgkill(r1, r2, 0xf)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:33 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x1000, "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"}, &(0x7f0000000180)=0x1024)
ftruncate(r2, 0x8200)

[ 2200.072769][ T8741] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2200.085377][ T8741] FAT-fs (loop1): Filesystem has been set read-only
04:05:33 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0xb000000})

04:05:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r6 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r7 = gettid()
fchmod(r6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r7, 0x1000000000016)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)

04:05:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0xa000000})

04:05:33 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x1000, "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"}, &(0x7f0000000180)=0x1024)

04:05:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000000)=""/33, &(0x7f0000000040)=0x21)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:33 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x1000, "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"}, &(0x7f0000000180)=0x1024)

04:05:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r6, 0x1000000000016)

[ 2200.797071][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2200.806937][ T8792] FAT-fs (loop4): Filesystem has been set read-only
[ 2200.816824][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2200.826861][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2200.840322][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2200.849271][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2200.859740][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2200.871327][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2200.881145][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:33 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)

04:05:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0xd000000})

04:05:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)

[ 2200.890020][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2200.899112][ T8792] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000a00)=""/4096)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:33 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
fallocate(0xffffffffffffffff, 0x0, 0xff, 0x3)

04:05:34 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
fallocate(0xffffffffffffffff, 0x0, 0xff, 0x3)

04:05:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
tkill(r6, 0x1000000000016)

04:05:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0xb000000})

04:05:34 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
fallocate(0xffffffffffffffff, 0x0, 0xff, 0x3)

04:05:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x1ff)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000005c0)='./file2\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
link(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)='./file1\x00')
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r4)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file1\x00', 0xfffffffffffffff9, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)="b41e96940b4667050081696c", 0xc, 0x1}, {&(0x7f0000000a00)="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", 0x1000, 0x1d5}, {&(0x7f0000000240)="babba7a549bb0e2ef35000f2ef86cdd99e1accb4ce08c213d3679e39709406143a2cc0a429d522b0d42e2bc22e571240dcf05aa36d4c8eea8b9d7818320b256ae6b1611b4c20b2d9122ab1bd491830288858306f6d5cc4befde3237f3d184070e191da9cd52b226855d6af18883e6ec3c7c92a4f0f1b1e5d7fdb3d7bd5d24c17", 0x80, 0xb7f}, {&(0x7f0000001a00)="286ed5828cc900637b67c40ccc0e490b9d0d8e17c54847aca45c6832e509ad2dd36510d703930cf6d595f7b1fd80e240a7aea69fd28639c128f429696d63da19e223bc4dc39d54f3e7bae4239c83fe099a4a8a138af0f6101783ae280c903d4b008196840f8a1751ac2b9ae4369b3235843bff63875bff6c05091605008c863035d1c0a5da29f751d69030cc045cdad5759584163c75ea834079d143a6c5ff55db03c58130a6d0bd7b3525feda6a517343cb7e10564b9e354df51bbe41f307c4c4d8c2be5e133f97e6879276040f53106beecf22d2b4615cb269c22480fb46227d74f8fe7cf810dfc5db89e24b2b4f36ac29a9dccc5cc30aa85ec895c1bbdecc8a4bbcc481306f9e135fb6380833714686707ad438971d6737cba1e8718e064e5d8b2526708437d24fea7432e1d9aa1d9c4dc6863f97357f48db870f22cfee58e5486eac3db42db5956bd4e85bd284dfd444bf76ce9f046e7d707c42a33de6417f280b4c9cc0ba96fa0553d9a4190301c77b215629285d223708a343a2c0e29ee09d9e3a16360a6dbca12e9a6855c4872f4f6786f19d2d357b59ed223619866eac421d109f56ea5d3541d4ac7b7212b9354037277a5469246cd245ce0e86199b4111d803d191f5a2594edaaa161842d332b67f653f18cfe63d2f42a1a5f75f53035a749dfc70cf2d10807285375463e45bed09ff12b625d083efb0ab92205a7af9da81bc1ca94d1dae15ab56804d5957e4bd56e12e68e2d1ba5f8068121b5d2304cf88aafcc1ef4ed6a52765a66f7129cd9ba465975216116f2515979a37af5a35248b344a066060ce58f7a56ca1ab2bd4ba1bbbc4b1621a13630edfa528f3ad4eaac64b3fce0380d6427d4851ed48834f0e3fd094e36d5ff2633738e25147d767d75224e9361f32b82fbaa0c385018a4d873d71c050f83261e50b9bfd436ea6aaec9d2b24469014ef607d89a6352220b93655a701956702e1e369e03db8be123acbc546b191a5165007b67c6a41bb9ed74075605ed1fefaab6f54db379c4978a4f35b5a8e376aa5776dfc46fd80cdd5e88871b013e7f40fa6e1c4184a37aa3fe8216e3aa5e273a105a9ee8b16e3939d4578ebd708bbde9a12c9d3ec4a87121d30a77cb4f56d00c8584cd68478652cc911d4f25b5f5e1da2b898caa861ec91ee9ec699205ea731dbedf80761c3e96d5c83df0058910d1108be96edb9614a6d3677907e9deb3450757ac99c1713176f7a1ec87effe25d353a4b772aeed7573ba60f7535b055ccb5bc49679518128d6fe3242e5d92bb1fb5670e3f3fdd70b1dee7d3bc337b25ed058e9e36ce666e822243eb69636bcb28b50d846ba220c78c77a248c482f168bb2b620734bc0efa41ba858e5b22ee6f0fb4dd1ff34a593d4ddf9c3b767a8c97693fba9cd90abd30fb2379c70c794df8bb6ce5fe6490336083ee791706981107fd4529507b8e3f8a5cf0e07f2048e98e0e07e0734b77fc11307fd4af1e7bbd69fe5d37e8ed74e9058c5b44d4af0cbcccc4543df79aed7b7cd8b82f248671efcc2e8b2d232a1e02fcc5d1ecdca8c5acd68378b4ca9da499811d646737049c1c01de2bc01d69ed6d06bba252f3cd72ac05cd050ad5fa32ae32703a734aa7727bc0d2ab0bdf72ddd05e49810941b3dacc026bdd24e25ffe3050c1e7a408af62a8991b7f83c005e5ab7e1bddb3a1ee77f82c880819f2ac16738f612f70edb2b5a33acea88b4f01b4f40e0f10c7b0889417d4d51a1ec63e6c9f5f4218225ce1800c248e426d0dd9930edf3fd82d2378e73bdc8f9ba1a0a77508009ea2cd6665379d9489d05b467cee366883a4a7b06cad99a66f00260cba5ccbf8496f2bac4466fa7b342557e729c8e13eccce5715257fda8e67f909a73dc8ab864e04ff372f0a9bf3376accabf4e1ebfb49ada1b8953784d7c13e320fe7426839a704b90e4be36b8e4a247d5eb829bb7d15bbaadf23dca4d8df783d89f05537f518d8d2f97081681a05965e57ac7faa145f394c473c03d2d9dd7564a4a91a3ebdef3820cfdad438743447ca1deac0c11abe1e6b840808f4b6ab233d1aadbe47f6ec5154441f8c622d7dfe82e28ec4298afedc4e386bb198006f09f4037af08c4b49b5203ce539e9e38a9264855c577e2cce253c50ba733b2bd9f650ac4cb603bfbd26abe957f30d29e21e3ad76e0ee38a23e18d37c9d002c6499655c7e99db5c3e026ed6b325e1655d2d2075bc9c8560cb2cefd87ce33d6092f12444a3283052e1e6909cd90b11643ce2295e3b1faf8a6a9c8cc0bb17d03575f1c69303b27426feac2c4a750a63f821cea8fae9d27cdc52a8783da5634727a952a98c9d5b53aebfce96bc95be045a23617612bfeda5bc4505dac82062c4e2d6f438ef94527fb82cd8e5dd3b82ccf00650b988ec3ab17038fdc14c99586abbcece91168c28342df7f255570202509d2e16b41a7081ac502983e4522b6cc92303387d37d153df69ac57126f5abe7716bac7be866e04b4ed5cd52f6d417b23b55c1af75c4848ca74014732eecb2630d57aa5db65692f7351f9d71c89a604f209631fb10e6ede19d45ba94cf40ed6c0ad06fd5e6567cddabc5d3a7d675004a33ec70f09845c868289825d42bde07da57654c9c1f1ede406245074b8c81b5cb8da6df6fc33c58bafb9749772e31434e128c27bb63e51f718fc51391723155ea4dae8243f7490a691f16345633c84051afa69fed12c291b7f307ba54ff9048356fad9b40be9ef3a960a9c85094dc8ca21f85973bee82da3023452f6e46f30a3d03913f981a80d12be5bf0749ea5fac0015f5e16a47ca917e01579a2905784cc5fde94b1ff531fd3f10dedb6a38b5a31fe798c791df7ffdbf5255d412b962f87ec04ee0102092811e093e0dee22d1a85026709c8ccd5f8545a7655f7ff836f5a619b87ae8776415daed2170f2b5e726c37c9d94b4de9faa166c9c2108cd3bf2856c7ad963d861470829f57af4e3bcafea2ebd7fd576f49c4795f7be6124e6524305315c9c496cd4e200206bb234e375c3f46fc41946314b3c451e78d7aff70145155c237c834c82d5346feb00fda5906c401f81899ec0126076d1e531dd02fb175bdeb8e338444597e61270c3228f415f793dcf31237099eb500971945c465a8ff97fa2016c29a91d9f0e07f415979a49c01f7bce46b8a79ff010468b2341931e7bab2079331d80cc69fe4105f2615991673401ac4af30b5804603b88ec3fe2f24c56db558a24a7f9421fe431e5728ec87e2659799fe33e9922981b21b7b858540c1259aef58fe3c725268ab4f0195cfe79fa24bb8f807fdbdd865fb5146bb4b8f3af256732f3dda1b0320d47fe792263f119f6c2c9b9ac96def74771c8fa6feb40ef6df499fa814388aa6aec4ed7495f9ab08e12f3dc640a019d91334c9533955a266bd5003313e882ffb348179c630c16843109d3ff292e9a0816c276fef0c358b11019cf67293af99ba6110fe5dc537ca77bd8011784a8dced5dfd45d85bcf0558ac936d7c2a94829981a0c69f946c1c213b05e68b9b39e2b3a07a266b82e8f8426373185122c6b624667a53649342c41a98323bc4d474d3235240953b97c83e0374c04b3d9c6c02ccb0d06479e10277e491c9d76555cb3e728d2b25efaf9259bdbe74f9710f23582ae1058163b96e49ed7ca078870de41fbf50902d3cde5ae8c51a19ed8dc08fb9b8f0986bb88b9b50bb4104e730b32ff78445c7aaf7f7e2b2d12917554bd7b5d5ebe56a42714a955bdc7c3a531e4029a9e7296323437e62181598067709b6522b7290461b7258b032eedb4974aa4a8084a30880830922d087f0e70a6b1b08522314fcfa7e25e91e81d886870e6baebe31b8fdcaf76129e284d844c544d6f985c848a092e0ba9b503fc971f2c4b8b96fb2fb703097c8e5a9c83f9ebe516961cfa8cdb49e20b6d7c30879cc02342ab198989c56437c4e7bee217dfdd177815bbb8644e774d0d79a10060e349730e429ed7674610c16bf09db811ae5fdf38182f5d94567a3c3c0396fb2d58c052ca01000339fb50447148134196a67b0bdf95377e260c443f187cd468ee972640cf9e5c4eff440dcd74daad7f22c10cc298e29f64edcb62a3939c076090c4ac9fb93e4fa4df00d9c239bc557a8b48b71c937e6654f339c1a7c7f42f85d3cd12886f6e493d88b28a4b2d02b4c6057560d3c524cfbb392eb07f9a56d13e97eb3b1c317b2e6496b86c5f5ee11290eeecc1f8190af36699ca44ba240c1c49313eb38a1a8e0fb225a7cec271450f577aa9e7226d8a13b6f664388cdfbd5fb2dfa4971be7a97fbd8bf8f2a9d1079307419939b695d64ab333ead662959a2f7969d56ffe8fc2938a9e4412d4c2ba69f68b2a1a2145b79ac86f71427acab2b25fcbd1fcb898eba65a87ac08d0e46a832b21548a4564f67c7259a190868da57464fb29ca374926d279b35a15a7e88500c4902a9bda2a965e890a0c5a556b94f22bb84f5e8327e5a6768dc08dc1ae9cb1933c881443b0ab73d242ff68e00dc090f45255503f9d71b0525a0c4ca565ada2abd7755bfb646869d4cc823935c3d6c7c07a15c3d3def814480f85995fef08820e5139508fc9bcd87d22ed5c8373f836c068a29203ec2b9581d92ffc88f20a3d9da2c19624157fa0c6eb3a0985f80c483e452f3131c715826df78e6c692efcb5cec1504b48dc7cdbb10d5ba0e50862efb08faa0a207171c95633109a4c8533b26d0db629bd5e281f280497622e8e87ce669daa5665bcdcb2ca7f728abf09155f4649a7b7135ea5e63325c18e043e509b1ac7f177dce08e7ff637bde9557e3c979c44d831425d04ef36c83a971311998561a7e9adaa2cc96dc5cf2addc645f95d13ca082e969b57434adcf7fcb9d54597defc0cdaee44c0aeadcda333da382112379add513fd4d4efe66e9e3b55124a068142fdc61b99c0a75928da5fbe007145ea8186e85cc67e6d020372393cebe66912d30dd909be1951b77dfcbf864fc972b2191fcf3572428098cbaad7c48d1190015ac55a05925ebd397965753688bcd25da3a603065696c0bb9ca7fe06cff03b5da9fc6c7cb3fad1726969aaffc61b03dead51a2232b74e8532087dace58917ce3abb130444b6dda44cfd359e3738def390074ccc3efd083b92eb7ff5a7c58d82eead0c3aeccde63622c287b5f1bd167dca3f1a80da32b41b3e10e107eef9db5f171a4c6b104e08f7d8aeb0f69dd8b90109bc21ae361c781dd3701a59879085918e5c6c0b77241a1dae6d5d8e1145860b92386424fd4c132f84f5e39c17fbc960d516504aa66a74ea330744623da230ea6abeed7e0b1f849b165832fbb53029d0e39d00a00427ce4eac28133e7c9ad89a59ae74189a521eba4a6d6eccd56d0cdc517695f5ca73294da9508403d622fcd6786b6b0be7dfc2389bbb29b490d507d4c637789e20e6aded03135f7ed1f420e8c96fa7c36299c67f46fc5fd2ef80ceb6c713f558e4eb106c1831d10ccd8963f1fa531e545c3fc24b57ed95951efcbbc245831b693e9724e7b378b212e573217998f2619901b988f70cddd1d83c20b91e786ae12298f7c8174c48b5aa5a2a20ab3b79b5224d914189404ed098df19be22dcaf227d7b01482014fc1c0aeadc84e92c0acda1f6d5874d79c74ea0741bf6328aaab5332ce44c76ab628b3a80e1748dad592a751af45ee16ddd79767cd6f94b690598904ba2fbe18ec334975b4a01667065866a55785b7b1e2cf4b092d517c85b275c5964a53dfa947eab114fe69185892689924219718f378d06d627", 0x1000, 0x3}], 0x2008400, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x1}}, {@huge_never={'huge=never', 0x3d, '+self%'}}, {@size={'size', 0x3d, [0x31, 0x13, 0x65, 0x2d, 0x33, 0x25, 0x67]}}, {@huge_always={'huge=always', 0x3d, 'vfat\x00'}}], [{@euid_eq={'euid', 0x3d, r4}}, {@seclabel='seclabel'}, {@smackfshat={'smackfshat', 0x3d, 'threaded\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'securityposix_acl_accessvboxnet0vmnet1'}}, {@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}, {@permit_directio='permit_directio'}]})
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:34 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2201.560301][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.569106][ T8861] FAT-fs (loop1): Filesystem has been set read-only
[ 2201.576383][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.585383][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.594286][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000a00)=""/4096)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2201.603151][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.612043][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.621070][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.629836][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.639353][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.648204][ T8861] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0xe000000})

04:05:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)

04:05:34 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2201.842670][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.856154][ T8875] FAT-fs (loop1): Filesystem has been set read-only
[ 2201.863091][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.872252][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.881217][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.890388][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.899886][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.908977][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.919368][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2201.932402][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:34 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2201.944485][ T8875] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000180)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0xc000000})

04:05:35 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
getsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2202.277461][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.286724][ T8909] FAT-fs (loop1): Filesystem has been set read-only
[ 2202.294134][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.304899][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.314366][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.323521][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.333519][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.353504][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.363019][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000005c0)='./file2\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
link(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)='./file1\x00')
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r4)
syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file1\x00', 0xfffffffffffffff9, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)="b41e96940b4667050081696c", 0xc, 0x1}, {&(0x7f0000000a00)="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", 0x1000, 0x1d5}, {&(0x7f0000000240)="babba7a549bb0e2ef35000f2ef86cdd99e1accb4ce08c213d3679e39709406143a2cc0a429d522b0d42e2bc22e571240dcf05aa36d4c8eea8b9d7818320b256ae6b1611b4c20b2d9122ab1bd491830288858306f6d5cc4befde3237f3d184070e191da9cd52b226855d6af18883e6ec3c7c92a4f0f1b1e5d7fdb3d7bd5d24c17", 0x80, 0xb7f}, {&(0x7f0000001a00)="286ed5828cc900637b67c40ccc0e490b9d0d8e17c54847aca45c6832e509ad2dd36510d703930cf6d595f7b1fd80e240a7aea69fd28639c128f429696d63da19e223bc4dc39d54f3e7bae4239c83fe099a4a8a138af0f6101783ae280c903d4b008196840f8a1751ac2b9ae4369b3235843bff63875bff6c05091605008c863035d1c0a5da29f751d69030cc045cdad5759584163c75ea834079d143a6c5ff55db03c58130a6d0bd7b3525feda6a517343cb7e10564b9e354df51bbe41f307c4c4d8c2be5e133f97e6879276040f53106beecf22d2b4615cb269c22480fb46227d74f8fe7cf810dfc5db89e24b2b4f36ac29a9dccc5cc30aa85ec895c1bbdecc8a4bbcc481306f9e135fb6380833714686707ad438971d6737cba1e8718e064e5d8b2526708437d24fea7432e1d9aa1d9c4dc6863f97357f48db870f22cfee58e5486eac3db42db5956bd4e85bd284dfd444bf76ce9f046e7d707c42a33de6417f280b4c9cc0ba96fa0553d9a4190301c77b215629285d223708a343a2c0e29ee09d9e3a16360a6dbca12e9a6855c4872f4f6786f19d2d357b59ed223619866eac421d109f56ea5d3541d4ac7b7212b9354037277a5469246cd245ce0e86199b4111d803d191f5a2594edaaa161842d332b67f653f18cfe63d2f42a1a5f75f53035a749dfc70cf2d10807285375463e45bed09ff12b625d083efb0ab92205a7af9da81bc1ca94d1dae15ab56804d5957e4bd56e12e68e2d1ba5f8068121b5d2304cf88aafcc1ef4ed6a52765a66f7129cd9ba465975216116f2515979a37af5a35248b344a066060ce58f7a56ca1ab2bd4ba1bbbc4b1621a13630edfa528f3ad4eaac64b3fce0380d6427d4851ed48834f0e3fd094e36d5ff2633738e25147d767d75224e9361f32b82fbaa0c385018a4d873d71c050f83261e50b9bfd436ea6aaec9d2b24469014ef607d89a6352220b93655a701956702e1e369e03db8be123acbc546b191a5165007b67c6a41bb9ed74075605ed1fefaab6f54db379c4978a4f35b5a8e376aa5776dfc46fd80cdd5e88871b013e7f40fa6e1c4184a37aa3fe8216e3aa5e273a105a9ee8b16e3939d4578ebd708bbde9a12c9d3ec4a87121d30a77cb4f56d00c8584cd68478652cc911d4f25b5f5e1da2b898caa861ec91ee9ec699205ea731dbedf80761c3e96d5c83df0058910d1108be96edb9614a6d3677907e9deb3450757ac99c1713176f7a1ec87effe25d353a4b772aeed7573ba60f7535b055ccb5bc49679518128d6fe3242e5d92bb1fb5670e3f3fdd70b1dee7d3bc337b25ed058e9e36ce666e822243eb69636bcb28b50d846ba220c78c77a248c482f168bb2b620734bc0efa41ba858e5b22ee6f0fb4dd1ff34a593d4ddf9c3b767a8c97693fba9cd90abd30fb2379c70c794df8bb6ce5fe6490336083ee791706981107fd4529507b8e3f8a5cf0e07f2048e98e0e07e0734b77fc11307fd4af1e7bbd69fe5d37e8ed74e9058c5b44d4af0cbcccc4543df79aed7b7cd8b82f248671efcc2e8b2d232a1e02fcc5d1ecdca8c5acd68378b4ca9da499811d646737049c1c01de2bc01d69ed6d06bba252f3cd72ac05cd050ad5fa32ae32703a734aa7727bc0d2ab0bdf72ddd05e49810941b3dacc026bdd24e25ffe3050c1e7a408af62a8991b7f83c005e5ab7e1bddb3a1ee77f82c880819f2ac16738f612f70edb2b5a33acea88b4f01b4f40e0f10c7b0889417d4d51a1ec63e6c9f5f4218225ce1800c248e426d0dd9930edf3fd82d2378e73bdc8f9ba1a0a77508009ea2cd6665379d9489d05b467cee366883a4a7b06cad99a66f00260cba5ccbf8496f2bac4466fa7b342557e729c8e13eccce5715257fda8e67f909a73dc8ab864e04ff372f0a9bf3376accabf4e1ebfb49ada1b8953784d7c13e320fe7426839a704b90e4be36b8e4a247d5eb829bb7d15bbaadf23dca4d8df783d89f05537f518d8d2f97081681a05965e57ac7faa145f394c473c03d2d9dd7564a4a91a3ebdef3820cfdad438743447ca1deac0c11abe1e6b840808f4b6ab233d1aadbe47f6ec5154441f8c622d7dfe82e28ec4298afedc4e386bb198006f09f4037af08c4b49b5203ce539e9e38a9264855c577e2cce253c50ba733b2bd9f650ac4cb603bfbd26abe957f30d29e21e3ad76e0ee38a23e18d37c9d002c6499655c7e99db5c3e026ed6b325e1655d2d2075bc9c8560cb2cefd87ce33d6092f12444a3283052e1e6909cd90b11643ce2295e3b1faf8a6a9c8cc0bb17d03575f1c69303b27426feac2c4a750a63f821cea8fae9d27cdc52a8783da5634727a952a98c9d5b53aebfce96bc95be045a23617612bfeda5bc4505dac82062c4e2d6f438ef94527fb82cd8e5dd3b82ccf00650b988ec3ab17038fdc14c99586abbcece91168c28342df7f255570202509d2e16b41a7081ac502983e4522b6cc92303387d37d153df69ac57126f5abe7716bac7be866e04b4ed5cd52f6d417b23b55c1af75c4848ca74014732eecb2630d57aa5db65692f7351f9d71c89a604f209631fb10e6ede19d45ba94cf40ed6c0ad06fd5e6567cddabc5d3a7d675004a33ec70f09845c868289825d42bde07da57654c9c1f1ede406245074b8c81b5cb8da6df6fc33c58bafb9749772e31434e128c27bb63e51f718fc51391723155ea4dae8243f7490a691f16345633c84051afa69fed12c291b7f307ba54ff9048356fad9b40be9ef3a960a9c85094dc8ca21f85973bee82da3023452f6e46f30a3d03913f981a80d12be5bf0749ea5fac0015f5e16a47ca917e01579a2905784cc5fde94b1ff531fd3f10dedb6a38b5a31fe798c791df7ffdbf5255d412b962f87ec04ee0102092811e093e0dee22d1a85026709c8ccd5f8545a7655f7ff836f5a619b87ae8776415daed2170f2b5e726c37c9d94b4de9faa166c9c2108cd3bf2856c7ad963d861470829f57af4e3bcafea2ebd7fd576f49c4795f7be6124e6524305315c9c496cd4e200206bb234e375c3f46fc41946314b3c451e78d7aff70145155c237c834c82d5346feb00fda5906c401f81899ec0126076d1e531dd02fb175bdeb8e338444597e61270c3228f415f793dcf31237099eb500971945c465a8ff97fa2016c29a91d9f0e07f415979a49c01f7bce46b8a79ff010468b2341931e7bab2079331d80cc69fe4105f2615991673401ac4af30b5804603b88ec3fe2f24c56db558a24a7f9421fe431e5728ec87e2659799fe33e9922981b21b7b858540c1259aef58fe3c725268ab4f0195cfe79fa24bb8f807fdbdd865fb5146bb4b8f3af256732f3dda1b0320d47fe792263f119f6c2c9b9ac96def74771c8fa6feb40ef6df499fa814388aa6aec4ed7495f9ab08e12f3dc640a019d91334c9533955a266bd5003313e882ffb348179c630c16843109d3ff292e9a0816c276fef0c358b11019cf67293af99ba6110fe5dc537ca77bd8011784a8dced5dfd45d85bcf0558ac936d7c2a94829981a0c69f946c1c213b05e68b9b39e2b3a07a266b82e8f8426373185122c6b624667a53649342c41a98323bc4d474d3235240953b97c83e0374c04b3d9c6c02ccb0d06479e10277e491c9d76555cb3e728d2b25efaf9259bdbe74f9710f23582ae1058163b96e49ed7ca078870de41fbf50902d3cde5ae8c51a19ed8dc08fb9b8f0986bb88b9b50bb4104e730b32ff78445c7aaf7f7e2b2d12917554bd7b5d5ebe56a42714a955bdc7c3a531e4029a9e7296323437e62181598067709b6522b7290461b7258b032eedb4974aa4a8084a30880830922d087f0e70a6b1b08522314fcfa7e25e91e81d886870e6baebe31b8fdcaf76129e284d844c544d6f985c848a092e0ba9b503fc971f2c4b8b96fb2fb703097c8e5a9c83f9ebe516961cfa8cdb49e20b6d7c30879cc02342ab198989c56437c4e7bee217dfdd177815bbb8644e774d0d79a10060e349730e429ed7674610c16bf09db811ae5fdf38182f5d94567a3c3c0396fb2d58c052ca01000339fb50447148134196a67b0bdf95377e260c443f187cd468ee972640cf9e5c4eff440dcd74daad7f22c10cc298e29f64edcb62a3939c076090c4ac9fb93e4fa4df00d9c239bc557a8b48b71c937e6654f339c1a7c7f42f85d3cd12886f6e493d88b28a4b2d02b4c6057560d3c524cfbb392eb07f9a56d13e97eb3b1c317b2e6496b86c5f5ee11290eeecc1f8190af36699ca44ba240c1c49313eb38a1a8e0fb225a7cec271450f577aa9e7226d8a13b6f664388cdfbd5fb2dfa4971be7a97fbd8bf8f2a9d1079307419939b695d64ab333ead662959a2f7969d56ffe8fc2938a9e4412d4c2ba69f68b2a1a2145b79ac86f71427acab2b25fcbd1fcb898eba65a87ac08d0e46a832b21548a4564f67c7259a190868da57464fb29ca374926d279b35a15a7e88500c4902a9bda2a965e890a0c5a556b94f22bb84f5e8327e5a6768dc08dc1ae9cb1933c881443b0ab73d242ff68e00dc090f45255503f9d71b0525a0c4ca565ada2abd7755bfb646869d4cc823935c3d6c7c07a15c3d3def814480f85995fef08820e5139508fc9bcd87d22ed5c8373f836c068a29203ec2b9581d92ffc88f20a3d9da2c19624157fa0c6eb3a0985f80c483e452f3131c715826df78e6c692efcb5cec1504b48dc7cdbb10d5ba0e50862efb08faa0a207171c95633109a4c8533b26d0db629bd5e281f280497622e8e87ce669daa5665bcdcb2ca7f728abf09155f4649a7b7135ea5e63325c18e043e509b1ac7f177dce08e7ff637bde9557e3c979c44d831425d04ef36c83a971311998561a7e9adaa2cc96dc5cf2addc645f95d13ca082e969b57434adcf7fcb9d54597defc0cdaee44c0aeadcda333da382112379add513fd4d4efe66e9e3b55124a068142fdc61b99c0a75928da5fbe007145ea8186e85cc67e6d020372393cebe66912d30dd909be1951b77dfcbf864fc972b2191fcf3572428098cbaad7c48d1190015ac55a05925ebd397965753688bcd25da3a603065696c0bb9ca7fe06cff03b5da9fc6c7cb3fad1726969aaffc61b03dead51a2232b74e8532087dace58917ce3abb130444b6dda44cfd359e3738def390074ccc3efd083b92eb7ff5a7c58d82eead0c3aeccde63622c287b5f1bd167dca3f1a80da32b41b3e10e107eef9db5f171a4c6b104e08f7d8aeb0f69dd8b90109bc21ae361c781dd3701a59879085918e5c6c0b77241a1dae6d5d8e1145860b92386424fd4c132f84f5e39c17fbc960d516504aa66a74ea330744623da230ea6abeed7e0b1f849b165832fbb53029d0e39d00a00427ce4eac28133e7c9ad89a59ae74189a521eba4a6d6eccd56d0cdc517695f5ca73294da9508403d622fcd6786b6b0be7dfc2389bbb29b490d507d4c637789e20e6aded03135f7ed1f420e8c96fa7c36299c67f46fc5fd2ef80ceb6c713f558e4eb106c1831d10ccd8963f1fa531e545c3fc24b57ed95951efcbbc245831b693e9724e7b378b212e573217998f2619901b988f70cddd1d83c20b91e786ae12298f7c8174c48b5aa5a2a20ab3b79b5224d914189404ed098df19be22dcaf227d7b01482014fc1c0aeadc84e92c0acda1f6d5874d79c74ea0741bf6328aaab5332ce44c76ab628b3a80e1748dad592a751af45ee16ddd79767cd6f94b690598904ba2fbe18ec334975b4a01667065866a55785b7b1e2cf4b092d517c85b275c5964a53dfa947eab114fe69185892689924219718f378d06d627", 0x1000, 0x3}], 0x2008400, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x1}}, {@huge_never={'huge=never', 0x3d, '+self%'}}, {@size={'size', 0x3d, [0x31, 0x13, 0x65, 0x2d, 0x33, 0x25, 0x67]}}, {@huge_always={'huge=always', 0x3d, 'vfat\x00'}}], [{@euid_eq={'euid', 0x3d, r4}}, {@seclabel='seclabel'}, {@smackfshat={'smackfshat', 0x3d, 'threaded\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'securityposix_acl_accessvboxnet0vmnet1'}}, {@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise_type='appraise_type=imasig'}, {@permit_directio='permit_directio'}]})
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:35 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2202.371967][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.380984][ T8909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:35 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
fchdir(0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:35 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2202.570213][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.579150][ T8929] FAT-fs (loop4): Filesystem has been set read-only
[ 2202.586568][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.595925][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.604718][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.613793][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.622684][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.631983][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.640772][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.649707][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2202.659377][ T8929] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:35 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0xf000000})

04:05:35 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)

04:05:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)

04:05:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
getsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x60c333f111b486a1)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0xd000000})

04:05:36 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)

04:05:36 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000140", @ANYRES16=r0, @ANYBLOB="200025bd7000ffdbdf254c0000000800dc0020000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080d5)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r2, 0x0, 0xff, 0x3)

[ 2203.082949][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.093015][ T8961] FAT-fs (loop1): Filesystem has been set read-only
[ 2203.100659][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.116078][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.124831][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:36 executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2203.134181][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.147645][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.164517][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.165238][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.176807][ T8969] FAT-fs (loop4): Filesystem has been set read-only
[ 2203.182452][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.197806][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.207248][ T8961] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.217654][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)

[ 2203.228043][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.248113][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.257618][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.266794][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2203.278560][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.289495][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.298696][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2203.308315][ T8969] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0xaaaaaaaaaaaab7d, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:36 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x10000000})

04:05:36 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:37 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0xe000000})

04:05:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)

04:05:37 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000180)='./file1\x00', 0xfffffffffffffffa, 0x0, &(0x7f0000000600), 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', 0x0, 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
tkill(r6, 0x1000000000016)

[ 2204.381117][ T9054] FAT-fs (loop4): bogus number of reserved sectors
[ 2204.387937][ T9054] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:37 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x10010000})

04:05:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', 0x0, 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', 0x0, 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2204.554261][ T9054] FAT-fs (loop4): bogus number of reserved sectors
[ 2204.561053][ T9054] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:37 executing program 4:
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0xf000000})

[ 2204.845749][ T9096] FAT-fs (loop3): bogus number of reserved sectors
[ 2204.853178][ T9096] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2204.925891][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2204.935015][ T9093] FAT-fs (loop4): Filesystem has been set read-only
[ 2204.942066][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2204.951047][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2204.959858][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2204.969612][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2204.978447][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2204.987514][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2204.996232][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.004940][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.013873][ T9093] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:38 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000480)=""/185, 0xb9)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:38 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
clock_gettime(0x3, &(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x94)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:38 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2205.173730][ T9114] FAT-fs (loop3): bogus number of reserved sectors
[ 2205.190460][ T9114] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:38 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
clock_gettime(0x3, &(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x94)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2205.349339][ T9231] FAT-fs (loop3): bogus number of reserved sectors
[ 2205.356202][ T9231] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2205.415681][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.439206][ T9232] FAT-fs (loop4): Filesystem has been set read-only
[ 2205.447109][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.456631][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.465682][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.474719][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.483621][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.492508][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.501345][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.510149][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2205.519524][ T9232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, 0x0, 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x11000000})

04:05:40 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
clock_gettime(0x3, &(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x94)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x2, 0x0)
sendfile(r2, r1, &(0x7f0000000340)=0x7f, 0x8f1e)
r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r4, 0x8200)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
tkill(r6, 0x1000000000016)

04:05:40 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x10000000})

04:05:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, 0x0, 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2207.443766][ T9254] FAT-fs (loop3): bogus number of reserved sectors
[ 2207.455068][ T9254] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2207.476030][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.486757][ T9261] FAT-fs (loop4): Filesystem has been set read-only
04:05:40 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
clock_gettime(0x3, &(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x94)

[ 2207.496778][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.507258][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.517061][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.527761][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.543233][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.714861][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.725290][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.736044][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.747818][ T9261] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2207.756514][ T9283] FAT-fs (loop3): bogus number of reserved sectors
04:05:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x7)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r4 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r4)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
vmsplice(r4, &(0x7f0000000640)=[{&(0x7f0000000480)="3caeed7d0bb897a7392b172c81487acf624b1c86c7e0882a96b5635e29bffeb0c7b5ac2306004a83f7716f79610c80878471b8c2269d430bf581dbc30c10fe04695fe14c430eafbb9ecc92d05e706892624f7d988eda342321ec87d449bd39343d3854c45c6d56d296295cf6ffc773cd9c368b7ac2959d7299ae61d10946dfc20295d06383bb156b7c12c6d47f", 0x8d}, {&(0x7f0000000240)="8f8d6fe798ea8136883964bfed393ff8878b6d97fbc96d5d4e00ea55fe2a7204564a842445003de04a2a1649f87a429c857f6ef4d1e20c9a57e4b50e6b0513e44196cb42ad53d5c6b805bd729913", 0x4e}, {&(0x7f0000000540)="1548f94951f3a34dde0b53cfdef07263a52dd86ada2123eae958a3a23f4291e5d0bc647f2a38a16177b5652c64f63b43fcd2f8a4b21f47d4b0f53aec82c1420344c563b0522f628ab71227fbc1ec31cf5fd81c6284651d11360e45e67ba6d94eb69ad503465e37ed19d31a208408c763fab411d0bf6cafbb59079d1798b70425b589958b1e5d231c6e193c0762df5d84ef022e039e1081c6fd613264a101b6bcb0bb265f8cdba025d826d20a557182bb2468158d056bc336c52f55a793f74357b2fbb24b977d5fc07f62281afd310cbd9f22ee8857ef718a0a4bbc3e1161b4b70903e1c2cca8a1681a1536d0133df7e561d63bb99dfca156a89f", 0xfa}, {&(0x7f0000000100)="ba432a5b60132f5e88dd16f4eff2ea28026a66a1122d35480ef495b7d27356b9342f16979ffefafbb2bed979a4e4b4f3c0f99fefb1144862bfda04b2", 0x3c}, {&(0x7f0000000340)="6b12972d4b7e82a14883f33a898feb92b41312303ed6b36762c030d9c5cece4523b969d58c212ae2d86781321da81f7a7eebf6c59d6e1cbfda3719a1b5f1e9a3191144755078c0c96866a5dbd38589e692671a4f423c50761448f3d880cd42fc0613", 0x62}, {&(0x7f0000000180)="12092f4d2208f23576c23fe42986287472e2c3a298d022009c33e20959dae29c70ac243dc00a8fc8958ec510255992d44a", 0x31}], 0x6, 0x4)
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r6, 0x8200)
r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f00000006c0)={0xf40, 0xc1, 0x9c64, 0x3, 0x1}, 0x14)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2207.765956][ T9283] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, 0x0, 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2207.911641][ T9398] FAT-fs (loop3): bogus number of reserved sectors
[ 2207.918927][ T9398] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0), 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0), 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2208.031905][ T9411] FAT-fs (loop3): bogus number of reserved sectors
[ 2208.039157][ T9411] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2208.056314][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.065235][ T9403] FAT-fs (loop4): Filesystem has been set read-only
[ 2208.072890][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.082168][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.091525][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.107152][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.117240][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x0, &(0x7f00000003c0), 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2208.128456][ T9416] FAT-fs (loop3): bogus number of reserved sectors
[ 2208.129359][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.135940][ T9416] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2208.144285][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.159724][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.169186][ T9403] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x11010000})

04:05:41 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x10010000})

04:05:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
recvfrom$unix(r4, &(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r6, 0x8200)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, &(0x7f0000000340))

[ 2208.282693][ T9421] FAT-fs (loop3): bogus number of reserved sectors
[ 2208.306512][ T9421] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2208.667445][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.677538][ T9541] FAT-fs (loop4): Filesystem has been set read-only
[ 2208.684447][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.693312][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.702249][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.711112][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.720267][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.729265][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.738117][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.747156][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2208.756188][ T9541] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:43 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
clock_gettime(0x3, &(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x94)

04:05:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{0x0}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffff9, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="0244f800"/15, 0xf}], 0x2a1001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x11000000})

04:05:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x12000000})

04:05:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
tkill(r6, 0x1000000000016)

[ 2210.499993][ T9556] FAT-fs (loop3): bogus number of reserved sectors
[ 2210.507249][ T9556] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{0x0}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2210.564187][ T9560] FAT-fs (loop4): bogus number of reserved sectors
[ 2210.571102][ T9560] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{0x0}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2210.766790][ T9580] FAT-fs (loop3): bogus number of reserved sectors
[ 2210.774221][ T9580] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2210.874013][ T9585] FAT-fs (loop3): bogus number of reserved sectors
[ 2210.881118][ T9585] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2210.922998][ T9560] FAT-fs (loop4): bogus number of reserved sectors
[ 2210.932524][ T9560] FAT-fs (loop4): Can't find a valid FAT filesystem
04:05:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x20, 0x1}}, 0x14)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2211.001667][ T9597] FAT-fs (loop3): bogus number of reserved sectors
[ 2211.008397][ T9597] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2211.096250][ T9608] FAT-fs (loop3): bogus number of reserved sectors
[ 2211.103204][ T9608] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2211.120227][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.129084][ T9603] FAT-fs (loop4): Filesystem has been set read-only
[ 2211.136582][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2211.145880][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.155025][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.164613][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.173872][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.182766][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.191825][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.200819][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.209754][ T9603] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2211.244537][ T9616] FAT-fs (loop3): bogus number of reserved sectors
[ 2211.255404][ T9616] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:44 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
clock_gettime(0x3, &(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x94)

04:05:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file2\x00', 0xc0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, &(0x7f0000013000)=0xfffffe0e)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
socket(0x10, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005304060000000000000000000087de8b95635691f42d92ad9cd6ecc2d6c400010000000000000000000000000a"], 0x28}}, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r12 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r11)
r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r12)
keyctl$chown(0x4, r13, 0x0, r10)
mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x100000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c736d61636b6673666c6f6f723d47504c2c657569643c8ce24af722a441f05ed857397a5505763d2ecd701a1c3078310cb9a39c87493a006faacef101b20ea46822df924aca67acd1ba8b1102860bad5218ef2cf8fc8f2126", @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=sysadm_u,func=POLICY_CHECK,rootcontext=staff_u,smackfsdef=security@,\x00'])
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x11010000})

04:05:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x13000000})

[ 2211.383340][ T9630] FAT-fs (loop3): bogus number of reserved sectors
[ 2211.391910][ T9630] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2211.688822][   T22] audit: type=1107 audit(2000001944.632:10510): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2211.728850][   T22] audit: type=1107 audit(2000001944.672:10511): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xfb, &(0x7f0000000480)={@empty, @empty, @void, {@mpls_mc={0x8848, {[{0x7}, {0x15b}, {0x8001}, {0x2, 0x0, 0x1}, {0x9}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {}], @llc={@snap={0xaa, 0x1, '2', "1b7959", 0x201, "f15d4785be15837d95e8c09f58ec872fff913034e789caacc058f0c7be1dd0d7fecc9adcb82691973f5c992bf22387a332d8c35c81f34a12b6aa90ce3bdfe30046fc8be391c7468684863ff6b9b823349b3e10fa69601e56fc326b953e1733a38b56252f98f190a5286c75fec698ba0629170d34ed2d375c336c3f54303571ab46bbaa7f9179dd1d59b3e7ea11ec6d452407089460b7c84f9a4a55a581b43766407ffdad3aaa7b03b6450f62bc7c7332015185b0d59797094811aeeb7db4736a85406aec4e"}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x423, 0x352, 0x864, 0x4e8]})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:46 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
clock_gettime(0x3, &(0x7f00000000c0))
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x14000000})

04:05:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x12000000})

04:05:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:46 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2213.549800][ T9664] FAT-fs (loop3): bogus number of reserved sectors
[ 2213.556569][ T9664] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2213.638192][ T9681] FAT-fs (loop3): bogus number of reserved sectors
[ 2213.645617][ T9681] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:46 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2213.873333][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2213.891448][ T9669] FAT-fs (loop4): Filesystem has been set read-only
[ 2213.896636][ T9797] FAT-fs (loop3): invalid media value (0x00)
[ 2213.902431][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2213.906584][ T9797] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2213.914625][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2213.931285][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2213.940990][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2213.949813][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2213.958571][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:46 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2213.967459][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2213.976165][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2213.987164][ T9669] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000000)=r1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'vlan0\x00', 0xff20})

[ 2214.076760][ T9811] FAT-fs (loop3): invalid media value (0x00)
[ 2214.087985][ T9811] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2214.177658][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.187176][ T9821] FAT-fs (loop4): Filesystem has been set read-only
[ 2214.193973][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.203081][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.211900][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.220646][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.229366][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.238169][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.247141][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.255937][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2214.264875][ T9821] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:49 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x100, 0x8)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:49 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x15000000})

04:05:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x13000000})

04:05:49 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2216.599181][ T9835] FAT-fs (loop3): invalid media value (0x00)
[ 2216.605386][ T9835] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2216.790392][ T9857] FAT-fs (loop3): invalid media value (0x00)
04:05:49 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2216.831426][ T9857] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2216.940074][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2216.949007][ T9963] FAT-fs (loop4): Filesystem has been set read-only
[ 2216.956069][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2216.965178][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2216.974239][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2216.987744][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2216.996537][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.005726][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.014942][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.023721][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x7530}})
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x3, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76040, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000340)={0x3, 'veth1_to_bond\x00', {0x2}, 0x2})
r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r5)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
readlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)=""/58, 0x3a)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000240))
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r7, 0x8200)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2217.032968][ T9963] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.046455][ T9970] FAT-fs (loop3): invalid media value (0x00)
[ 2217.052653][ T9970] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2217.185681][ T9979] FAT-fs (loop3): invalid media value (0x00)
[ 2217.192121][ T9979] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2217.261225][   T22] audit: type=1107 audit(2000001950.202:10512): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2217.295767][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.304519][ T9986] FAT-fs (loop4): Filesystem has been set read-only
[ 2217.311303][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.320213][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.329028][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.337953][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.346732][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.355479][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.364228][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.373133][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.381915][ T9986] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2217.437219][   T22] audit: type=1107 audit(2000001950.382:10513): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:52 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x14000000})

04:05:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x16000000})

04:05:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x28208dd, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r1, 0x8200)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:52 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2219.625060][T10000] FAT-fs (loop3): invalid media value (0x00)
[ 2219.631533][T10000] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2219.944983][T10025] FAT-fs (loop3): invalid media value (0x00)
[ 2219.951825][T10025] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x1}}, 0x10)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000040))
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2220.019945][T10030] FAT-fs (loop3): invalid media value (0x00)
[ 2220.026166][T10030] FAT-fs (loop3): Can't find a valid FAT filesystem
04:05:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2220.259060][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.269670][T10047] FAT-fs (loop4): Filesystem has been set read-only
[ 2220.276910][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.285907][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.294553][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.304783][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.314399][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.323431][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.332667][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.341610][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.350386][T10047] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:53 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x15000000})

04:05:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x17000000})

04:05:53 executing program 4:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2220.568181][   T22] audit: type=1107 audit(2000001953.512:10514): pid=10076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2220.576293][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.593004][T10077] FAT-fs (loop4): Filesystem has been set read-only
[ 2220.600291][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.609034][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.618197][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.627140][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.635997][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.645034][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.654171][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.663369][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.674622][T10077] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2220.820825][   T22] audit: type=1107 audit(2000001953.762:10515): pid=10076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:05:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:55 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x3)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x16000000})

04:05:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x18000000})

04:05:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

[ 2222.751209][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2222.761206][T10103] FAT-fs (loop4): Filesystem has been set read-only
[ 2222.770337][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2222.789268][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2222.800281][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2222.813459][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r0, 0x0, 0xff, 0x3)

[ 2222.937745][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2222.947561][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2222.957582][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2222.968059][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2222.977545][T10103] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x9)

04:05:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r0, 0x0, 0xff, 0x3)

04:05:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r0, 0x0, 0xff, 0x3)

04:05:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c146d6b66732e6661c17ec4c24e2dea5c2970f7f8", 0x16}], 0x280201c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2223.236943][T10235] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2223.246960][T10235] FAT-fs (loop4): Filesystem has been set read-only
04:05:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x17000000})

04:05:56 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x19000000})

04:05:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:56 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:56 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
fallocate(r1, 0x0, 0xff, 0x3)

04:05:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x162)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x3, 0x542, [0x20000a00, 0x0, 0x0, 0x20000bc6, 0x20000ee2], 0x0, &(0x7f0000000040), &(0x7f0000001000)=ANY=[@ANYBLOB="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"]}, 0x63c)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xff, 0x3)

04:05:56 executing program 1:
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:56 executing program 1:
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x18000000})

04:05:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xff, 0x3)

04:05:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004841)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0xce5d)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:57 executing program 1:
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1a000000})

04:05:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xff, 0x3)

04:05:57 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2224.447208][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2224.457398][T10331] FAT-fs (loop4): Filesystem has been set read-only
[ 2224.464389][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2224.474122][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2224.494061][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2224.504163][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2224.516184][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:57 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x3)

[ 2224.540724][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2224.550098][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2224.564490][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2224.574205][T10331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x0)

04:05:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = dup2(r9, r8)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000000)={<r11=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000100)={r11, 0x6, 0x8})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2225.045702][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.054420][T10381] FAT-fs (loop4): Filesystem has been set read-only
[ 2225.061496][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.070329][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.079207][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.088072][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.096765][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.105966][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.114678][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.123378][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.132349][T10381] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:58 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x19000000})

04:05:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
accept$unix(r6, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e)

04:05:58 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x0)

04:05:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

[ 2225.272672][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.281628][T10401] FAT-fs (loop4): Filesystem has been set read-only
[ 2225.289165][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.298190][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.307257][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.318631][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.332499][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.344878][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1b000000})

04:05:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x0)

04:05:58 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

[ 2225.370873][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.381580][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.390424][T10401] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x108, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x723}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1105}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x108}, 0x1, 0x0, 0x0, 0x84801}, 0x20000800)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400, 0x0)
r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, r4, 0x0)
r6 = dup2(r5, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x40)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r7, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r7, 0x8200)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:58 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

[ 2225.833596][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.843501][T10538] FAT-fs (loop4): Filesystem has been set read-only
[ 2225.850724][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.859600][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.868720][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.877550][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.887080][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.895888][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.904618][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.913667][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2225.922557][T10538] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:05:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1a000000})

04:05:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000340)={0x2b, 0x2})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
syz_mount_image$msdos(&(0x7f0000000380)='msdos\x00', &(0x7f0000000480)='./file1\x00', 0x5, 0x8, &(0x7f0000000a00)=[{&(0x7f00000004c0)="9278b65d909c91f2381471b333b165e25f99168fb6daad92b26403c693e08a82", 0x20, 0x4}, {&(0x7f0000000500)="0b8fad21e0cd62b6360a3aaf3186a8a665c742fd876fa303c1bf05915dbf7e696f786c6975cc9702ff8d225695972aed339c4b633aa0c6c8208b3dff0ff375bf0375df371b5cea198d6c0209221e9ce721a5ccc5480c6df276be8d53c19433577a", 0x61, 0x8}, {&(0x7f0000000580)="efa1dc9b63be3f78ad148760d6b6656f95956f2a38429e2a65205ca93794419f18304b54881c064f97f09b4eb4b7dceaf866bc45acacd1e8c6a0820df36f64218cee821a9512cf96c87ff7ec53d20c469eefa63eca6a5022c579587bdf2a22f9dd88fafce3625d7a401da91823e07e4c569aae56bd475934dbc3ebfcf05cfdf27819635394f83d07cd7b7907e7353f2d0cfa0eb875d11df8ecf4d9b8be317b7e3a3b9eaa89ffb2a7d3a5465728974c5bc3515e3f2e87ae90ef63d3350e25ca89a3ce01d8906f739fa7b6abe9f431473dc9a7fa896d57a022c7205ceb88", 0xdd, 0x6}, {&(0x7f0000000680)="e26e5d4f77a68ee61ada9f4604b6d6d0f870a087b03395cf6d5bead3c9a72a725c4465803d34609514944090df71c286569568f34c4e70d2177fc5c9807173bac2e2532b50f8329a29e08b9e99e81c6861b996e464fa20968e1e5e538d450f2cf309b1354efda2089ac9e47639c2e780be3198014c1eff6fb7062e708fc65036abddf81bb022b613c44a61a22e0f87f83f", 0x91, 0x4}, {&(0x7f0000000740)="6159a7c560ab170352a50f2cda38bfaa2cc919a69d70e44ac7fe8587890f0f5b166f9d7fe3e9338473f319a4b9bdbcc6d9f326a33a303189a862aa3b940871a5d316e28714cb6760ca", 0x49, 0x6}, {&(0x7f00000007c0)="3350d4eb1b1c855f692c0166d7bb285e1da6962a9d62bd8940480533d52b24237f69816ce4c9d0e11f15cf68df25c76eb47c90d5503f650856a117064ef3311c3f105fac93cf398832dbaed4f8a99ed562ab973f1d02c7581e81829c8f98b2aa72de48e555bd7083ad38a256a1302f4ef713f9180b9cf23f87fea1b88931c069a2fc10d4111a98d0c0", 0x89, 0x591}, {&(0x7f0000000880)="d418165e4b3ffea94616d47fd5251d76c406fef189784a075d3b0ccbeda706ea79d37a630f1445e7079a1412fb003d449f2b1cf1c3af238ed5cc5c45b31991eba5941f8b7a5c96944d0781fc632d22b53c6f8a27feeec416df1d12399bf0fbec042b352d15eb05dcea593e21948652623822c22125a823b8279803413ee531434d047f6f1a58a634cfe251c310935cd3a224ab1b325b5d40f127aee4e254fae8bca8827459e0d2", 0xa7}, {&(0x7f0000000940)="00d85327ae", 0x5, 0x2}], 0x8400, &(0x7f0000000ac0)={[{@dots='dots'}], [{@smackfsroot={'smackfsroot', 0x3d, '\''}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x12}}, {@obj_role={'obj_role', 0x3d, '.bdev-keyringppp1security!cpuset}^vboxnet0bdevXppp1,vmnet1bdev[keyring'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@obj_type={'obj_type', 0x3d, '/selinux/commit_pending_bools\x00'}}]})
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
dup2(r3, r4)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x811)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2226.108731][   T22] audit: type=1107 audit(2000001959.052:10516): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2226.111306][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.130968][   T22] audit: type=1107 audit(2000001959.052:10517): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2226.134020][T10663] FAT-fs (loop4): Filesystem has been set read-only
[ 2226.156504][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.165993][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.174958][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.189297][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.199094][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.208603][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.218677][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.227875][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
accept$unix(r6, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e)

04:05:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1c000000})

04:05:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

[ 2226.256079][T10663] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x10000)
vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000240)="e4cc6159dcd26e65e07cfe0724687ba049abf598e06c07f0b36a5c934403c0c1d3dbe6dfc602d325fde5519e1b13b32e6cad5cb055aea08782ee2d17c2e43ac674cab74f935f57ad", 0x48}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000340)="dfd5fe7698588d1bf0a50bc7fff3a46bff496426ceac2a353fda55d9fc356d4c42b3571f543d541f0ce97e65b8c27ec9581aeff72198766790cc1351a26a20aaae41", 0x42}, {&(0x7f0000000580)="d103714c8df7928ed464f9358e1a4cb72ac8efa4d4c4960d0d40f932dfd6fd2abea619275ac363fd8bdf725321e218402562818dbcb5a4cb9e0c9359bcc879c7bdcd99f76e5d7e4ad927b4f8517fbc664c188642db92350de967d7a71641e27ad9ad006e1281d27561838993", 0x6c}, {&(0x7f0000000600)="7275281f479fcfe53463c61a918c3fde924abc4fd27ef0e8db6d05afde79731f30b0ccedaa4867b78532ab19f9d87aa8883a4cd1355b823301b8d75513fca9b505933a9a897ac38fffa8532d61783c8beedce067051562b5e65104b27c28bacbd7f135608a558688c606180ce7a093101c668c973d308ebf35907a700c03863206340356f231e664b756dd927d86879c54d1ed2407174e027fb92c04e475b67e6ebc6462c9fafbff9165b422e3ffc6322ae5e8a7e150ae43c7eac4cb52636ffd722bb856fc9d1899de9baecc4c5f3e9ea44e780d00590dbc8c538b2c216905e154a1071952a4cbee94409046b4ed", 0xee}, {&(0x7f0000000700)="739f293a458ccbd3e2702b7b49e2bf966c5223e17d1425f53f313112cb7160aee6dd68e4e66a959ea00e044e7a4fcca5c11f016d0ebe2f0c15d1af64a23944e12a4f14ecd8ac67be75c236262c94b00bccbcda186574f6d2d1f58cfa106396c427abc2204619cc574a57738290e200f652905d2a2a64ffe019f3f02f8732c4f964427d73d22a47ac992653d3ae80db65591541821b475fa05629bd65553da4154a4fd724b3feea3382c8730a3fc93a31b81c58e5a3", 0xb5}, {&(0x7f0000000040)="4cfc0cdae3eb4fd6fbd85408d4c1faf336d1b36c472694de551b2881362aaa783536067fa982c33ac74bc43f7b02d05c5c6506e73c", 0x35}, {&(0x7f0000000100)="1ab508d914aaaf26adfe396ed52072b3571254a6493759c2f93ac5d5cf3a199f7e6344fdfedb99d813dba30a52470d7d3d85797ea4e0", 0x36}], 0x8, 0x4)
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:05:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2226.373929][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.382935][T10784] FAT-fs (loop3): Filesystem has been set read-only
[ 2226.390163][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.420515][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.437374][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.450302][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.471334][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.518520][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2226.583595][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.595802][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.621096][T10784] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:59 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', r3})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r4, 0x8200)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2226.750528][T10909] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2226.762055][T10909] FAT-fs (loop4): Filesystem has been set read-only
04:05:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1b000000})

04:05:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:05:59 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2226.889873][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.906931][T11026] FAT-fs (loop4): Filesystem has been set read-only
[ 2226.915178][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.927496][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.937940][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.947905][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.957290][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.966526][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.975444][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:05:59 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2226.984562][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2226.993582][T11026] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_UNALIGN(0x6, 0x1)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:06:00 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x1000000000016)

04:06:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1d000000})

04:06:00 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x3)

[ 2227.214393][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.223502][T11156] FAT-fs (loop4): Filesystem has been set read-only
[ 2227.230390][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.240138][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.249259][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.258495][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.267762][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.276810][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.285961][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.294705][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.304491][T11156] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:00 executing program 3:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:06:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
ioctl(r1, 0x1f, &(0x7f0000000000)="f02968a2c90955dbac47a92eea5956f468ed")
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = dup2(r10, r9)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11)
r12 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r13 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r14 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r15 = dup2(r14, r13)
ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r15)
accept4$tipc(r15, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r3, 0x8200)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2227.615442][   T22] audit: type=1107 audit(2000001960.552:10518): pid=11279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2227.643755][   T22] audit: type=1107 audit(2000001960.582:10519): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2227.645853][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.669328][T11280] FAT-fs (loop3): Filesystem has been set read-only
[ 2227.677682][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.686553][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.695669][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.706585][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.715802][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.724529][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.734062][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.743055][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.752059][T11280] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1c000000})

04:06:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x1}}, 0x10)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000040))
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:06:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @rand_addr=0x6}, @rand_addr="ccf5bd70897e59c02753fef6127b2087", @mcast2, 0x4, 0x9, 0x9, 0x400, 0x96, 0x1000000})
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2227.773358][   T22] audit: type=1107 audit(2000001960.712:10520): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2227.957871][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.966935][T11300] FAT-fs (loop3): Filesystem has been set read-only
[ 2227.974016][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.983318][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2227.992292][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1e000000})

04:06:00 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2228.030908][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.040048][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.049965][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.059196][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.060282][T11308] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
04:06:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

[ 2228.068807][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.077071][T11308] FAT-fs (loop4): Filesystem has been set read-only
[ 2228.086668][T11300] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x1}}, 0x10)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000040))
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:06:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000240)='./file2\x00', 0x301180, 0x41)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000340)={0x2, 'bond_slave_1\x00', {0x8}, 0x9})
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffd, 0x0, 0x1, 0x1}}}}, 0x30}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x453, 0x6}, [], {0x14}}, 0x28}}, 0x0)
r7 = gettid()
ptrace$setopts(0x4206, r7, 0x0, 0x0)
tkill(r7, 0x23)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={<r8=>0x0}, &(0x7f0000000480)=0xc)
sched_getaffinity(r8, 0x8, &(0x7f00000004c0))
fcntl$setown(r6, 0x8, r7)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:06:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2228.392146][   T22] audit: type=1107 audit(2000001961.332:10521): pid=11326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:06:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

[ 2228.431376][   T22] audit: type=1107 audit(2000001961.332:10522): pid=11326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
[ 2228.505363][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.514815][T11329] FAT-fs (loop3): Filesystem has been set read-only
[ 2228.521967][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.531068][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.540564][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.549815][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.559379][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.572428][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.581530][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.590703][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1d000000})

[ 2228.592400][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.600168][T11329] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.614635][T11345] FAT-fs (loop4): Filesystem has been set read-only
[ 2228.628645][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.638199][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.647558][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xfb, &(0x7f0000000480)={@empty, @empty, @void, {@mpls_mc={0x8848, {[{0x7}, {0x15b}, {0x8001}, {0x2, 0x0, 0x1}, {0x9}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {}], @llc={@snap={0xaa, 0x1, '2', "1b7959", 0x201, "f15d4785be15837d95e8c09f58ec872fff913034e789caacc058f0c7be1dd0d7fecc9adcb82691973f5c992bf22387a332d8c35c81f34a12b6aa90ce3bdfe30046fc8be391c7468684863ff6b9b823349b3e10fa69601e56fc326b953e1733a38b56252f98f190a5286c75fec698ba0629170d34ed2d375c336c3f54303571ab46bbaa7f9179dd1d59b3e7ea11ec6d452407089460b7c84f9a4a55a581b43766407ffdad3aaa7b03b6450f62bc7c7332015185b0d59797094811aeeb7db4736a85406aec4e"}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x423, 0x352, 0x864, 0x4e8]})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2228.657173][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.668212][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.679065][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.688864][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.698343][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2228.707769][T11345] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f0000000000)='./file0\x00', 0xc0502, 0x1f)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42911, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000480)=""/134)

[ 2228.775658][T11358] ==================================================================
[ 2228.784174][T11358] BUG: KASAN: use-after-free in do_xdp_generic+0x612/0x1500
[ 2228.791639][T11358] Read of size 8 at addr ffff8880a22687ff by task syz-executor.3/11358
[ 2228.800162][T11358] 
[ 2228.802576][T11358] CPU: 0 PID: 11358 Comm: syz-executor.3 Not tainted 5.4.19-syzkaller-00496-gf0212822faa9 #0
[ 2228.813020][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2228.823165][T11358] Call Trace:
[ 2228.826656][T11358]  dump_stack+0x1b0/0x228
[ 2228.831041][T11358]  ? show_regs_print_info+0x18/0x18
[ 2228.836376][T11358]  ? vprintk_func+0x105/0x110
[ 2228.841161][T11358]  ? printk+0xc0/0x109
[ 2228.845357][T11358]  print_address_description+0x96/0x5d0
[ 2228.850905][T11358]  ? devkmsg_release+0x127/0x127
[ 2228.855948][T11358]  ? do_xdp_generic+0x365/0x1500
[ 2228.860888][T11358]  ? pskb_expand_head+0x256/0x10f0
[ 2228.866015][T11358]  __kasan_report+0x14b/0x1c0
[ 2228.870686][T11358]  ? do_xdp_generic+0x612/0x1500
[ 2228.875798][T11358]  kasan_report+0x26/0x50
[ 2228.880134][T11358]  __asan_report_load8_noabort+0x14/0x20
[ 2228.885767][T11358]  do_xdp_generic+0x612/0x1500
[ 2228.890703][T11358]  ? __kasan_check_write+0x14/0x20
[ 2228.895811][T11358]  ? _copy_from_iter+0x886/0xaa0
[ 2228.900766][T11358]  ? generic_xdp_tx+0x4f0/0x4f0
[ 2228.905641][T11358]  ? tun_get_user+0x3d10/0x3d10
[ 2228.911189][T11358]  tun_get_user+0x2498/0x3d10
[ 2228.915867][T11358]  ? tun_do_read+0x1f10/0x1f10
[ 2228.920636][T11358]  ? do_futex+0x2416/0x3f90
[ 2228.925470][T11358]  ? stack_trace_save+0x111/0x1e0
[ 2228.930972][T11358]  ? __rcu_read_lock+0x50/0x50
[ 2228.935735][T11358]  ? futex_exit_release+0xd0/0xd0
[ 2228.940759][T11358]  ? putname+0xe5/0x140
[ 2228.945116][T11358]  tun_chr_write_iter+0x134/0x1c0
[ 2228.950245][T11358]  do_iter_readv_writev+0x5fa/0x890
[ 2228.955689][T11358]  ? vfs_dedupe_file_range+0xa00/0xa00
[ 2228.961486][T11358]  ? security_file_permission+0x157/0x350
[ 2228.967214][T11358]  ? rw_verify_area+0x1c2/0x360
[ 2228.972081][T11358]  do_iter_write+0x180/0x590
[ 2228.976675][T11358]  ? do_writev+0x9e/0x560
[ 2228.981023][T11358]  do_writev+0x2cd/0x560
[ 2228.985294][T11358]  ? do_readv+0x400/0x400
[ 2228.989745][T11358]  ? __kasan_check_read+0x11/0x20
[ 2228.995014][T11358]  ? _copy_to_user+0x92/0xb0
[ 2228.999608][T11358]  ? put_timespec64+0x106/0x150
[ 2229.004986][T11358]  ? ktime_get_raw+0x130/0x130
[ 2229.009907][T11358]  ? get_timespec64+0x1c0/0x1c0
[ 2229.014781][T11358]  ? __kasan_check_read+0x11/0x20
[ 2229.019911][T11358]  ? __ia32_sys_clock_settime+0x230/0x230
[ 2229.025725][T11358]  __x64_sys_writev+0x7d/0x90
[ 2229.030408][T11358]  do_syscall_64+0xc0/0x100
[ 2229.035190][T11358]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2229.041101][T11358] RIP: 0033:0x45c581
[ 2229.044991][T11358] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01
[ 2229.064610][T11358] RSP: 002b:00007ff18a9a3ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014
[ 2229.073038][T11358] RAX: ffffffffffffffda RBX: 000000002000057b RCX: 000000000045c581
[ 2229.081250][T11358] RDX: 0000000000000001 RSI: 00007ff18a9a3c00 RDI: 00000000000000f0
[ 2229.089225][T11358] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 2229.097310][T11358] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff
[ 2229.105284][T11358] R13: 0000000000000b7c R14: 00000000004cd906 R15: 000000000076bf2c
[ 2229.113265][T11358] 
[ 2229.115600][T11358] The buggy address belongs to the page:
[ 2229.121240][T11358] page:ffffea0002889a00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0
[ 2229.130598][T11358] raw: 4000000000000000 ffffea0002889a08 ffffea0002889a08 0000000000000000
[ 2229.139284][T11358] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 2229.147913][T11358] page dumped because: kasan: bad access detected
[ 2229.154584][T11358] 
[ 2229.157042][T11358] Memory state around the buggy address:
[ 2229.162673][T11358]  ffff8880a2268680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2229.170758][T11358]  ffff8880a2268700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2229.178996][T11358] >ffff8880a2268780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2229.187234][T11358]                                                                 ^
[ 2229.195296][T11358]  ffff8880a2268800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2229.204662][T11358]  ffff8880a2268880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 2229.213069][T11358] ==================================================================
[ 2229.221342][T11358] Disabling lock debugging due to kernel taint
[ 2229.228663][T11358] ------------[ cut here ]------------
[ 2229.234134][T11358] Illegal XDP return value 4294967274, expect packet loss!
[ 2229.241953][T11358] WARNING: CPU: 0 PID: 11358 at net/core/filter.c:6907 bpf_warn_invalid_xdp_action+0x5a/0x60
[ 2229.252225][T11358] Modules linked in:
[ 2229.256153][T11358] CPU: 0 PID: 11358 Comm: syz-executor.3 Tainted: G    B             5.4.19-syzkaller-00496-gf0212822faa9 #0
[ 2229.268086][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2229.278411][T11358] RIP: 0010:bpf_warn_invalid_xdp_action+0x5a/0x60
[ 2229.285863][T11358] Code: e8 db 7b 5e fe 83 fb 04 48 c7 c0 6b 6e 56 84 48 c7 c6 73 6e 56 84 48 0f 47 f0 48 c7 c7 3e 6e 56 84 89 da 31 c0 e8 76 51 35 fe <0f> 0b eb bc 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 4c 89
[ 2229.308890][T11358] RSP: 0018:ffff88819dfb7668 EFLAGS: 00010246
[ 2229.314957][T11358] RAX: 3de1fb4f70c9ef00 RBX: 00000000ffffffea RCX: 0000000000040000
[ 2229.323038][T11358] RDX: ffffc9000076f000 RSI: 000000000003f4f8 RDI: 000000000003f4f9
[ 2229.331026][T11358] RBP: ffff88819dfb7670 R08: ffffffff812d0560 R09: ffffed103b745dc0
[ 2229.339250][T11358] R10: ffffed103b745dc0 R11: 0000000000000000 R12: dffffc0000000000
[ 2229.347330][T11358] R13: 00000000ffffffea R14: dffffc0000000000 R15: ffff8881c6839c80
[ 2229.355399][T11358] FS:  00007ff18a9a4700(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000
[ 2229.364418][T11358] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2229.371089][T11358] CR2: 000000000076c000 CR3: 00000001c73c2004 CR4: 00000000001606f0
[ 2229.379059][T11358] DR0: 0080ffff00000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2229.387167][T11358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[ 2229.395251][T11358] Call Trace:
[ 2229.398661][T11358]  do_xdp_generic+0xd2d/0x1500
[ 2229.403586][T11358]  ? generic_xdp_tx+0x4f0/0x4f0
[ 2229.408541][T11358]  ? tun_get_user+0x3d10/0x3d10
[ 2229.413985][T11358]  tun_get_user+0x2498/0x3d10
[ 2229.418762][T11358]  ? tun_do_read+0x1f10/0x1f10
[ 2229.423533][T11358]  ? do_futex+0x2416/0x3f90
[ 2229.428341][T11358]  ? stack_trace_save+0x111/0x1e0
[ 2229.433407][T11358]  ? __rcu_read_lock+0x50/0x50
[ 2229.438180][T11358]  ? futex_exit_release+0xd0/0xd0
[ 2229.443217][T11358]  ? putname+0xe5/0x140
[ 2229.447375][T11358]  tun_chr_write_iter+0x134/0x1c0
[ 2229.452642][T11358]  do_iter_readv_writev+0x5fa/0x890
[ 2229.457850][T11358]  ? vfs_dedupe_file_range+0xa00/0xa00
[ 2229.463490][T11358]  ? security_file_permission+0x157/0x350
[ 2229.469212][T11358]  ? rw_verify_area+0x1c2/0x360
[ 2229.474438][T11358]  do_iter_write+0x180/0x590
[ 2229.479020][T11358]  ? do_writev+0x9e/0x560
[ 2229.483340][T11358]  do_writev+0x2cd/0x560
[ 2229.487568][T11358]  ? do_readv+0x400/0x400
[ 2229.492072][T11358]  ? __kasan_check_read+0x11/0x20
[ 2229.497260][T11358]  ? _copy_to_user+0x92/0xb0
[ 2229.502078][T11358]  ? put_timespec64+0x106/0x150
[ 2229.506930][T11358]  ? ktime_get_raw+0x130/0x130
[ 2229.511700][T11358]  ? get_timespec64+0x1c0/0x1c0
[ 2229.516781][T11358]  ? __kasan_check_read+0x11/0x20
[ 2229.523118][T11358]  ? __ia32_sys_clock_settime+0x230/0x230
[ 2229.528831][T11358]  __x64_sys_writev+0x7d/0x90
[ 2229.533923][T11358]  do_syscall_64+0xc0/0x100
[ 2229.538413][T11358]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2229.544374][T11358] RIP: 0033:0x45c581
[ 2229.548262][T11358] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01
[ 2229.568203][T11358] RSP: 002b:00007ff18a9a3ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014
04:06:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:02 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x1f000000})

04:06:02 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

[ 2229.576608][T11358] RAX: ffffffffffffffda RBX: 000000002000057b RCX: 000000000045c581
[ 2229.584718][T11358] RDX: 0000000000000001 RSI: 00007ff18a9a3c00 RDI: 00000000000000f0
[ 2229.592724][T11358] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 2229.600767][T11358] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000ffffffff
[ 2229.608824][T11358] R13: 0000000000000b7c R14: 00000000004cd906 R15: 000000000076bf2c
[ 2229.616886][T11358] ---[ end trace 4f82be37ca54394c ]---
04:06:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1e000000})

04:06:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r5 = gettid()
fchmod(0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r5, 0x1000000000016)

04:06:02 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2229.803596][T11481] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2229.812569][T11481] FAT-fs (loop4): Filesystem has been set read-only
04:06:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r5 = gettid()
fchmod(0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r5, 0x1000000000016)

04:06:03 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

[ 2230.109795][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2230.119141][T11505] FAT-fs (loop4): Filesystem has been set read-only
[ 2230.126800][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2230.136173][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2230.145980][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2230.154853][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2230.164119][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2230.174713][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2230.183812][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
[ 2230.192998][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r5 = gettid()
fchmod(0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r5, 0x1000000000016)

04:06:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
tkill(r6, 0x1000000000016)

[ 2230.205768][T11505] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17)
04:06:03 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'veth1_to_team\x00', 0x1})
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x20000000})

04:06:03 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x1f000000})

04:06:03 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file2\x00', 0xc0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, &(0x7f0000013000)=0xfffffe0e)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
socket(0x10, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005304060000000000000000000087de8b95635691f42d92ad9cd6ecc2d6c400010000000000000000000000000a"], 0x28}}, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r12 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r11)
r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r12)
keyctl$chown(0x4, r13, 0x0, r10)
mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x100000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c736d61636b6673666c6f6f723d47504c2c657569643c8ce24af722a441f05ed857397a5505763d2ecd701a1c3078310cb9a39c87493a006faacef101b20ea46822df924aca67acd1ba8b1102860bad5218ef2cf8fc8f2126", @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=sysadm_u,func=POLICY_CHECK,rootcontext=staff_u,smackfsdef=security@,\x00'])
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:06:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

[ 2230.644043][   T22] audit: type=1107 audit(2000001963.582:10523): pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:06:03 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file2\x00', 0xc0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, &(0x7f0000013000)=0xfffffe0e)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
socket(0x10, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005304060000000000000000000087de8b95635691f42d92ad9cd6ecc2d6c400010000000000000000000000000a"], 0x28}}, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r12 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r11)
r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r12)
keyctl$chown(0x4, r13, 0x0, r10)
mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x100000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c736d61636b6673666c6f6f723d47504c2c657569643c8ce24af722a441f05ed857397a5505763d2ecd701a1c3078310cb9a39c87493a006faacef101b20ea46822df924aca67acd1ba8b1102860bad5218ef2cf8fc8f2126", @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=sysadm_u,func=POLICY_CHECK,rootcontext=staff_u,smackfsdef=security@,\x00'])
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

04:06:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:03 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file2\x00', 0xc0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, &(0x7f0000013000)=0xfffffe0e)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ftruncate(r2, 0x8200)
r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = dup2(r6, r5)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
socket(0x10, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005304060000000000000000000087de8b95635691f42d92ad9cd6ecc2d6c400010000000000000000000000000a"], 0x28}}, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r12 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r11)
r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r12)
keyctl$chown(0x4, r13, 0x0, r10)
mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x100000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c736d61636b6673666c6f6f723d47504c2c657569643c8ce24af722a441f05ed857397a5505763d2ecd701a1c3078310cb9a39c87493a006faacef101b20ea46822df924aca67acd1ba8b1102860bad5218ef2cf8fc8f2126", @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=sysadm_u,func=POLICY_CHECK,rootcontext=staff_u,smackfsdef=security@,\x00'])
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)

[ 2230.987173][   T22] audit: type=1107 audit(2000001963.932:10524): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:06:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

[ 2231.140132][   T22] audit: type=1107 audit(2000001964.082:10525): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 msg=''
04:06:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
tkill(r6, 0x1000000000016)

04:06:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x21000000})

04:06:06 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x20000000})

04:06:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x11000000})

04:06:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:06 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x11000000})

04:06:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
tkill(r6, 0x1000000000016)

04:06:09 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000002300)=""/138, 0x8a}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/66, 0x42}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/100, 0x64}], 0xa, &(0x7f0000000900)=""/227, 0xe3}, 0x9}, {{&(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/136, 0x88}, {&(0x7f0000000e00)=""/87, 0x57}, {&(0x7f0000000e80)=""/130, 0x82}], 0x7, &(0x7f0000000fc0)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000001080)=@tipc=@name, 0x80, &(0x7f0000001400)=[{&(0x7f0000001100)=""/57, 0x39}, {&(0x7f0000001f00)=""/259, 0x103}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x5, &(0x7f0000001480)=""/181, 0xb5}, 0x5}, {{&(0x7f0000001540)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f0000002200)=[{&(0x7f00000015c0)=""/122, 0x7a}, {&(0x7f0000001640)=""/113, 0x71}, {&(0x7f00000016c0)=""/232, 0xe8}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f00000018c0)=""/201, 0xc9}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/137, 0x89}, {&(0x7f0000001b40)=""/17, 0x11}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000002100)=""/18, 0x12}, {&(0x7f0000002140)=""/42, 0x2a}, {&(0x7f0000002180)=""/88, 0x58}], 0xd, &(0x7f0000001d00)=""/202, 0xca}, 0x9}], 0x4, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x2000002)
fallocate(r3, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x1800, r4, 0x0, 0x0, 0x40000000})

04:06:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x22000000})

04:06:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:09 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r5, 0x0, 0x0, 0x2000002)
fallocate(r4, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x0, 0x0, 0x0, 0x11000000})

04:06:09 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:09 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)

04:06:09 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x1ec, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

04:06:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
fchmodat(r4, &(0x7f0000000000)='./file1\x00', 0x100)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0)
r5 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1})
unshare(0x40600)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0)
r6 = gettid()
fchmod(r5, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r6, 0x1000000000016)