6b, 0x61) r6 = request_key(&(0x7f0000000500)='id_resolver\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)='NLBL_UNLBL\x00', 0xfffffffffffffffc) r7 = add_key(&(0x7f00000005c0)='id_legacy\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="49103c88876f4f9657bd9cbfcc1856e4341765a51a3c33c9bce79e51d7304cfc6aa990699a84129d28149713ef49f685538656b7981021d1c1442e6e15ae1ab4517eb1abdf5653730c7b953f7f73c3edfc7544291675a7949911d924b550d45e0a62b2c73dda10b92351a930f940ae5dd90b2f13d42c8490fbc2e19ed59a3b7c05c7837146ea244c2075482d8b051342d7fc876d62b5c88d18fecb41ed92de76cda6d0803ef598e70917d7511729112f63dfb3f8575e34c2f31cd3223d64e45daa3a03e299c09b833befc51e990850830a0f598830fa40825f2ffe6e41a4b6df434a41e1dd0adf363c2df15ce41406e5dbc571ce", 0xf4, 0xffffffffffffffff) keyctl$negate(0xd, r6, 0x0, r7) mkdir(&(0x7f0000000740)='./file0\x00', 0x8c) syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0xff, 0x10003) r8 = accept$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000800)=0x1c) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000000840)={0x200, 0x3, 0xaf, 0x4, 0xff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000b40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000dc0)=0xe8) r11 = gettid() r12 = clone3(&(0x7f00000011c0)={0x20000800, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080), {0xd}, &(0x7f00000010c0)=""/128, 0x80, &(0x7f0000001140)=""/11, &(0x7f0000001180)=[0x0, 0xffffffffffffffff], 0x2}, 0x50) r13 = creat(&(0x7f0000002980)='./file0\x00', 0x6) r14 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000000880)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002bc0)=[{&(0x7f00000008c0)={0x148, 0x2d, 0x2, 0x70bd29, 0x25dfdbfb, "", [@generic="ed62d6c4dd3e5a78de609a8a733860c793683d3f1ccf6543b8e4287d830ac0a82b9a4a8ef60406a97297eaaf041971330ab59b2e1f5be5df7b7a68c82dc98fdb69381d28b77e0513a093", @nested={0xec, 0xb, 0x0, 0x1, [@generic="cd59caa0aeabeea95a2046f9cd", @generic="4143d40e2425ceec1d4963b8c4281dccf7b140f41dca8ad8ab63582823150bb74c53cf176e010d1f9cad5f53203fcafd029c13aabf7b36c9d447dc9bfebc5fbbfb49883f52e864e22d31d33f2d55", @generic="4e676b02d7e2a8178dfcf575042f80701a0be6221b3cca2ca03140bc12c2c2aab526c2fec6afc3c14e41b8b02519c44de00e2c64b41b4c683bbe710d7614b3a48a0a77bc9658df0ba243a8298624a1f92f8c8164c07d5b92e79d7403d77d59764f339d94b16fe87d9a128ed0434ef940200f74b125d7da5d15efbcffc7ce1ef1c6e8484831252c09e1f5a451a0"]}]}, 0x148}, {&(0x7f0000000b80)={0x10c, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x34, 0x86, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @u32=0x6}, @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x1ff}, @typed={0x4, 0x66}, @typed={0x5, 0x39, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x8, 0x0, 0x0, @uid=r9}]}, @nested={0xbc, 0x58, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x56, 0x0, 0x0, @u64=0x96}, @generic="7891d988139f811120848f664bb805272d8a7202fcc64ce1e777c9005b071499ccb1b396f76819705a947a9978398c42178a55afe1aa14fafa6dd08673ec49be062a24757f8d737181b57ac77516ed634fb37a1e90ca2411485b31f0189835146638bcce41fa9e1a5a9c1545345bc7deb5646e89df224574ebd0aee1fc8d239dc96302e080a41f86e761f1c75652e49ebe25f5fe81d5d4932a1de55d96e4b770"]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @ipv4=@rand_addr=0x8001}]}]}, 0x10c}, {&(0x7f0000000e00)={0x1e8, 0x26, 0x310, 0x70bd26, 0x25dfdbfe, "", [@generic="1dcaae4969c35289cba32debf5d2fb77d0ae9e556e269792187b639c6d06deb893109b1c07a7aba216e4a5586e4784c5bf", @generic="aa7690af1ec963", @typed={0x8, 0x14, 0x0, 0x0, @uid=r10}, @typed={0x56, 0x6f, 0x0, 0x0, @binary="9ce9417444e5f0e25f0116d027f408001d3a3abe29ce4e3a1c0fb9dcce71633557fd130b5c3419e007299704926db4a2a0fbe4f0b4f46871436157aab506f0e2e437a551647fab0b5b4b835cc404abb446b3"}, @nested={0x17, 0x10, 0x0, 0x1, [@generic="a9574f51ab49c8cf524347d515ce470aa03387"]}, @nested={0x125, 0x6d, 0x0, 0x1, [@generic="a1ce340cca81cfcc2f3cbf37775010aa261c053383014ad01cacb29225a31a49e23e931f39f8afb147409e51d7710cf566ab073437aeca5c897df12e68266e4e6fd7a6f7d1a49b1b311b5f63446254733ddb096c7f", @typed={0x8, 0x89, 0x0, 0x0, @pid=r11}, @generic="219acab5f3707ddc37674a1a32a7278d6865f34af7d66073c6b418e8ca28eb0ee54bea739be281da8a006936aa9453a468c674a951d066232145df6cf70d792cba8ccc50e89d2fb7e23330136c65a62ebbde8731c4a65d2f2580ac0948edac956fc4a39160ea9481d3ecafe5cda96da066bc709f7a3f7a7eb3c3d53d879527fd33a7d7eb6c1ba649b6957367918795780837ecda745b2abbce50102d3de2353bfe6518c33af479a3a639f723d155e0e7419a820fbfeddd57d4521a8c5dfd7909a1e24f0a"]}]}, 0x1e8}, {&(0x7f0000001240)={0x16d0, 0x3b, 0x0, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x66, 0x0, 0x0, @ipv4=@loopback}, @generic="1d97259195d486e171c2c64a2e3a34ac48dfc94d40a2e3569bb2d8bfea5bb3b246188fde84bbeffb5ab64faece390b7cd7f04f44a7f78b7389ead2d3629e956ab3d77666e3b33abc1f30281b4cd21c8b1772535afeeee5db2d0bfc7fa3929ae0c53deb4c8361", @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@remote}, @nested={0x368, 0x63, 0x0, 0x1, [@generic="0bc0e849e3c941de3ad16ef0ff895aec56905758457bfeea4c9844842a621a9db388b67ea162e1465ab09c20fff92558edec46f45c7667fc1a360b25cf17c20acc65c4e3ad4f245369b1a14d7a5f89c812b4d6d370943f04384b5e83066d10b5e4434ce3c129b2a2d18046af7bc2e370820ac5560a3fffaa20c7676868423e4767ac848c0ca889c1596da5f891108ddff3bac7a7a73f6af190eb601075195c75e95821c804bf867530dd20730b8160065bcfd5", @generic="ae6b0b151e93d470bca75a4e39009b", @generic="77cd686fe0fac684dbf95e7ecec1a03d5d50d336bbc783eaab97875edef8d1275c4ba505673830c89aaa3516699c", @generic="42619ce462699dea27d17ef69ce0814f2c1dfae36bd2239278b8f5c21084cdaa8bb90c1fb66b8e1c69fdbdfe7337dc717d5debe25a879b49bcd1a32b37d1a6eaeb1186b480cc1107d2baf061fddd246cb9b04a9f4ecb85df0aec590baa83cc2a551e", @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@local}, @typed={0x84, 0x74, 0x0, 0x0, @binary="2e19fc2817bb95bb3a281f691d67a5dc1a36f281992c30875446bf169062f30a8205164a6b1163a12f6b8bdb361593a31a061181dfb30f2bfe51efa5f509b4c3a9ac73833c3a108bb31abbcbf37ca12feec003fdf2d129ac44256a454388cc11ff4bca4bfcdac0ad31bc209caada76ab373db81c54efa4686314408273e5054d"}, @generic="333bf54a0e30bb3c249408e9cb3b4e53161ad803c815a3590a58f999436efd0d669f7054e15ab7fec083b57565a31ead70c9a459a218e8e3d3206825c0dd378aa1842255f7dc4906373a5f76c8afa06ca44d99655102bd38f176b2681dd860ef9636f9fb7e01d746c753d0224c88bd9d99451d464eb16caf93d28bd967d3e90f3598ea1cc85ff0e97b902291fb4382c858b5ba334d77560aae9a39919eee9bd0385557", @generic="e3f526d7b7d22969b31db2b11b8ef554eeeaec6613af4515ba2a1192326c61a48938569885d35f1655bd81bf0775fd2c4dfe41f73a2ebfae1eba3991148663b1acef0d581da8d48ca46a80b83e4249ff9065a21d5376a8aaad3f50b4de7c70b66ccb06ce5195942262b9c3a74776ab158b8a1202f2189837466471a9ee48c06f70f2930bf30a6171e6cb75d67f6b1b6635b15d3f517616a2006f81a6856bdd8dc37f6a32fe61f6e7398330a7eb5a85bf77f33b4ea4fb2fb111e3cd4132fbceefede4096f6d4e499f288d", @generic="65cda1944fffbd16e0a61a334956a664d3b2ddced6ad50d1ff"]}, @nested={0x129f, 0x70, 0x0, 0x1, [@typed={0x4, 0x9}, @typed={0x8, 0x82, 0x0, 0x0, @u32=0x3}, @generic="f693093b70a5dfa4139068304acffc4cbb06ceeacb3ff4a8c26a9bb985b281fb77d1ea78bbe826de1b93f3da5c2e2db059db4e418ed7d49df413a0f98f5d33f2409d080baf24ca1d80152308bc2465f8875dbc6b4e", @generic="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", @generic="e989fc3370ab3f51c92fe288a92105ffc8984c4935b35e50e0dcf1495046352b2ffb1a6d40edc12de5d772c2ea81a94dbe3e62fc09ee3d742a4878b0ca8967cf34c86a7d0ef4", @typed={0xf8, 0x66, 0x0, 0x0, @binary="6e284fab23984bcbaa7d89ca0a27e68147ad161fdad2e89b140231bfe2e3c23f8390be8e97553065a4b77f2942b2da9eeaa46e046d689bd95041df1fb2c2ad312811315b2682e721172b56f96d596a7accadca07afc5039a938b01965cf42a44b2eac1a31d5c341793af2cf7aecb5f7394ccbeab3ae7186d4869a8a7d41059b58a215ef7bb1771c1f23a6e983bd4e8e0b722c36d76011890194aa1b94607fec4d9e8a47e35809bd1fbbec75b733dc3e3da5495968865ef9345283559246cdd987f5aafbf72c9cd70ec0691d723ea451ca1e76a5671ef4fc6c11ce4676e25ec654b8c847f0faffa4eba4adee551c02ad00df1a6fd"}, @typed={0xfa, 0x45, 0x0, 0x0, @binary="dbaf0d23e2f8012fcb0727700d7c2a651b3e9b9391cd9e44923ef3df665c7d948b75a6d9a8259f3a6eb074d61a04cd2d64be65c854eabac3f0e1615dad9e159f4535ce29a70130978aff0cea6c4babc6ce977d8dafdf1e77943151ef5449c988733ee8684d50f5cc0465eebc0d9692e913a21d7fc85cddd8fb1a220f39d148f666887a7eb29af2de6d512f26c43813ec7314122873c0f46f50efc8f0ea3dd9f45f07a582062073d85fb7ff210ddb87f0cb730977f7db7711728576a042f7f5739ebd39ee465276c84147efc49da03514c91debb546479076e7891014f826fc36c27270ad90fbb61fdae0ad11c943fb3c9c8488f71fb2"}]}, @typed={0x8, 0x5b, 0x0, 0x0, @fd}, @nested={0x22, 0x7, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid=r12}, @generic="79bb16d87b899b005f3b78d6d591779e9218ba51e865"]}]}, 0x16d0}, {&(0x7f0000002940)={0x34, 0x22, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x63, 0x0, 0x0, @fd=r0}, @generic="86be66b66b86a1b4fe", @generic="f44b528d71b16e9165ac0e6f263d6a334200b5"]}, 0x34}, {&(0x7f00000029c0)={0x1cc, 0x8000, 0x8, 0x70bd25, 0x25dfdbfb, "", [@generic="211500c09326b40f8d1de4e01bb90893f1ae98cee57a18e4f8b3145c8b4349fd46e0189269928e1af5aecd41b281ea86d220c7c2e9769b8e92ae2c2e07d6639eb8a3ca5f9e4ab3267ade19fe2f08658ee990555692815a205174b3b18d6ac52ce6874055fae99474cc73ae8d18e627bc9adbfa0639d8bf0421c6d512b20c4ce477c01cd9f43ea1d5546a1dec456cc1dff123d4a8719a62d64c7a7ee10c6a8e5c6af1f276b9820974ff77022333959ce449237533ca78703d7fbc2fbc9b5cea742d0c6c5117", @typed={0x8, 0x79, 0x0, 0x0, @fd=r13}, @nested={0xde, 0x6b, 0x0, 0x1, [@generic="f9920830a00fdf39323f9e6b84e94cc31c778abbad71af22d5cd3c269eb3ef9238f975b8c0b5348f977de858ea93b1e40a02201d4585bc10d96c51d2957a8a9b730e225f822e2f2f500a78ea2d68c83217490751d2fd6fc18bc8719e9eb5675f55d77daa0cb014f721b67a9d8627281768f01a5c31b39633e1176a6f959b1c611b4397af763746c3e75f66bdaed1495b7dcbed4eb7824ecc48e5783a8501fe2e91f1f7f9682e523461ce1a16a1d80797ea68d10443671ac99958", @typed={0xd, 0x95, 0x0, 0x0, @str='vboxnet1\x00'}, @typed={0x8, 0x55, 0x0, 0x0, @uid=0xee01}, @typed={0x7, 0x4e, 0x0, 0x0, @str='syz'}]}, @nested={0xc, 0x44, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @pid=r14}]}]}, 0x1cc}], 0x6, &(0x7f0000002c40), 0x0, 0x44}, 0x8000) [ 57.050889][ T22] audit: type=1400 audit(1580376054.052:14): avc: denied { map } for pid=1876 comm="syz-fuzzer" path="/root/syzkaller-shm730957971" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 09:20:54 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="06af6bcc7404435b53c1e22d8b8da1b6246b4c864b02bf92d4417de56c0da6803a0fe6130bac1f6f844bc479e1b7e58f32251ae3863bd1b696850c78398e3acb20c221c3c8dfe340a8c2916d4aba4bd7252a2c4b1633998bd99bf0875e49ce6c8fffb4d141dd3281628736ec062fd40a8bdc393eda2ab284445b795a5072d613eeaf326b4c355a4e8e304b6bad2dd61d40fb3f6af5f6ec476243f65442158dc459fc958858d0fc8d03c0b821926810e4275dadb3f9923e4938e64a54543b785b22398a73bea202ab3b770e429307f926dbfef7e3e5c97add431e92b5d9a76a50612933b3f3bee5e2c398f74be6f946ba7aa613dddfcdcd") pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) r7 = syz_open_procfs(r6, 0xffffffffffffffff) recvfrom$inet(r7, &(0x7f0000000380)=""/79, 0x4f, 0x40002000, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() fchown(r8, r9, r10) r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580)='/dev/bsg\x00', 0x80080, 0x0) ioctl$EVIOCGKEYCODE(r11, 0x80084504, &(0x7f00000005c0)=""/41) syz_open_procfs(r6, &(0x7f0000000600)='net/llc/socket\x00') sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x800) r12 = getpid() get_robust_list(r12, &(0x7f0000000880)=&(0x7f0000000840)={&(0x7f0000000780)={&(0x7f0000000740)}, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)}}, &(0x7f00000008c0)=0x18) r13 = fcntl$dupfd(r0, 0x0, r8) ioctl$FIGETBSZ(r13, 0x2, &(0x7f0000000900)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000940)) r14 = socket$nl_route(0x10, 0x3, 0x0) flock(r14, 0xc) openat$bsg(0xffffffffffffff9c, &(0x7f0000000980)='/dev/bsg\x00', 0x50083, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000009c0)=[@sack_perm, @sack_perm, @timestamp, @window={0x3, 0x1, 0x20}, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x7}, @timestamp], 0x9) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a40)='NLBL_CIPSOv4\x00') ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000a80)="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") write$nbd(r2, &(0x7f0000000b80)={0x67446698, 0x0, 0x3, 0x4, 0x4, "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"}, 0x1010) 09:20:54 executing program 3: get_thread_area(&(0x7f0000000000)={0x8000, 0xffffffffffffffff, 0x1000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}) modify_ldt$write2(0x11, &(0x7f0000000040)={0x800000, 0x20000000, 0x5000, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xffffffff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='-:\x00', r0}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000140)={0xc0000018}) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x51c6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48084}, 0x80) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c020) chdir(&(0x7f0000000400)='./file0\x00') r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000600)=0xe8) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000740)='eth0\\{security\xc0,\x00') r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$P9_RLOCK(r7, &(0x7f00000007c0)={0x8, 0x35, 0x1, 0x1}, 0x8) openat$urandom(0xffffffffffffff9c, &(0x7f0000000800)='/dev/urandom\x00', 0x480, 0x0) r8 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000840)={0x0, 'batadv0\x00', {0x1}, 0x800}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000880)={0x2, 'gre0\x00', {0x8000}, 0x6}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r9 = add_key(&(0x7f0000000940)='.dead\x00', &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r9, &(0x7f00000009c0)=""/145, 0x91) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='memory.events\x00', 0x0, 0x0) ioctl$VT_SETMODE(r10, 0x5602, &(0x7f0000000ac0)={0xdb, 0x7, 0x0, 0x4, 0x28}) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vga_arbiter\x00', 0x402200, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x4, &(0x7f0000000b40), 0xfffffffffffffffd) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000b80)={'gretap0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}) 09:20:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x88840, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x10001, 0x1000, 0x8000, 0x40, 0x5}, 0x14) r1 = syz_open_pts(0xffffffffffffffff, 0x501000) ioctl$VT_DISALLOCATE(r1, 0x5608) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x101001, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000100)={0x9, 0xd3, "ab2063c4b8eae111fc7622264c5c8a06666aa5e1f5507ef7c84ce4cfa6a195dfad74abf7b8481e2566254ae3023228f2a5acb566a0ce0d1e10e20666045404cade6e447d548cd6a5b3af37fb1daa2ada0b5da535270cf127e82034163f9f56afef73bdeca8100e5b2c1da3bc1322776bd27107eab93677d157a1f8c69fc0597b566e2c044884040d22dea85ed7483fa899abf27407c7aac56e5013dcdd1eda344320dafe5db828835aafd7f951752287e4359212d32a152a3c7cdd6efbc9b6f9d39cdb22e5ec48de4be02b82befb59d571f9a0"}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8000, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000240)=""/63) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) fcntl$getflags(r2, 0xb) fcntl$setflags(r3, 0x2, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3f) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80000) tee(r4, r3, 0x0, 0x7) delete_module(&(0x7f0000000400)='syz2\x00', 0x1800) r5 = openat$cgroup_ro(r0, &(0x7f0000000440)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x3) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000600)=0x1) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000640)="fd918ea18ca9227e3fcd9a7f81aa756482851a983d54e9955b8ebb19e503f55c2744fcd6ab48f735cf012888d18939bf40ad0acd6691e1c2526748736b740d721856f076599039b04eeb053904d72ac92f8f7121ec2fb3822c0b9ddcb6eb7fccc5292d4eeb7d42442e06095e4281f4b81125123ff6d13459c5a2864659f75e65101c0560107203cb6fc029a9c69daba7460fc7f13646a57690843cb8ddb424f569afce8c36b8d51ec3e1a82778f70362a0ee9ae23389a2b34a4ae2f85285c7a18d950ced2dde3c9d2d8b41fce2ec3c017ad84e7bf89fa14b6bb17bdc0e58c3e5cc39a8642952b2cfd98662d4e4b085dbee1610fc55cbfe16bd3f8c3f61edde5786b7db81c67a382fade7cd95b829c580702615e95164a374f362547fb513bc488f97b056151ac3e55f11878eb6c026db496f2348b6d7cab53129d79a82716b1b3dd997171fb0a3f4c0aa4109f7f8b300248da1c7e024b03a2b3038b672a80d10879da7d832511c1da941db4450a23affdd66ea2904f1985bbdf2161743633314613ac1618f5913767ad6ad4e0bbc41459c1cb708f1ebe2af27737b101dee1ef0d3b975cff064afbc5c8b7d4f44da2a5f231404ac5fb30636547503c757771e4863e26e49f040f1b9332a393475c14565af26599a2152ac66e729dc33b0d2eb2da306e9493d6bfefd957fe37a9a63f36496478d5ad443c08eac228f155af2c49ed01e9a62a2eb6a1e1eaa346dd1db6e823c8bc485a724076dc1ba57fce511938f73bf0111cd88acdd84feffa657e1a97e1f9d1f0a434434f0ccdd870c0f492a38de23e645e8f54cca99d7dfd304d2307930504ffe74713fb08d124290cf1aafb192b32f2e7002a2f008c6b0b960e70d8f96a136e52c1ce678ab645bc04846fe6244da3c9571fb26675de67ae7a17d2273c16c0728f2701b66ddc34a18c2182f599b8c9210982b9c319a2dad7fe748b84d8045da62fea3e7dbc8f968333ac3a6ef895163ef29a2f7343d5ed345494c2f2f6e7521651a2599b75cb971932bd4265681b5866a0c241e1c2710d2a2d15b7a313c6af81f90e2e18e81d138c12ebf595d1465d3c413a962846f554a070c5e55648d6a01ceeb459eb56900a286f2997cfc174979f263e3c134f902b73ae922120e68c13bfab16fd4188f00db0efe1ac675b8c701485cf6130e772eb16bbc9424194fee1f3b11e60c0a0a261641c0e329b7310bd11679aca0ec975aa8fbb9949a1fd8a79c8092137796535c4565cd1d309c2746f84b00ef01468933f311816f2248d16722f36d3cb158903480fc590c99604c598427d89564db101ecc4111761954e63c5373354966c861d2e31f28f5593feb281d0db31ac1911ca33eb8d674c28455737a67e1c2feb526537617a97c60916930d6b0bf2e9b148d09077c506d19c27338bd7855efd34590a220f091ef4c4eebb239e8843f9e3e1afe207c9b581f7d71181133771adfb6fa731ca27f2ba6b846fbb3f10eddffd1dfa334174738fe2c2271e39a45104aa85dd635670cd44fb515520b7866af6c6997727a7672f27f5dbc4522d58c1d85c03107430b5e8032f437ea50c2267c042ab43e93e81d2f666643f591783a811a62a7ef578d0c4d240ddfd9b96a093ef1fb9552029c46769c503a46513b9035e0ce23113f025aaba8006bb7ad0ae8ba074b2f700784ce8a85c9b19c57f8981746f1ee53af9b5bc028ac07156ac476d83a6e8e118c44073584efe1220d4a299a936df5776486ffd5d7075e9209ec6308295b9ba13b1795ccef22fe7158c821da9478d7d722ca9580c6b44f054956a4f2206d733d220738493dcc93c515378c6b1a663882325a3f4248a8ced5083bd66f4e1d15ceb866eeaf5a142d6861cd16a8945b8b503660ec6e8e7fe1a9dbf0be632d71b8307906c387068c200d729b5a483eed3acf33a935cb4f93c29009367feea2f5167c0e5069b4e5bf5f38b93b07c5316e2a56c586829a2b7db0bce8f45cfbb614645e2941b01f5b8dcf1bd46bd9dd5780fc706101b70deb54173b8fae31a44358fdd57dfc967fc5f8ee8bf3bef0f5c4127146b2c868f841b6d582b2d0a53904de4c964e6830f6e00053a396fdd7ed6e8dcad377596237d2ac36da6d0d3a2be01ca1e989e5f5211da86e808576291460ba901b9d94232e2c3c7b8298315e85b6a597a3193341afd4adf1a2797ea00aba8240565d4afc918928f4b1d2c9524efd3709763b09cf02c69e1c493ce9fdd42475708be561e24e40c444031920fcb2bc216593cd86cd053101b89e2131df91a9bd13d8200af60fd5f13f5af6f6dbf98658ec5b4bcf025548c1acd4c481505fa59c68331e8d7b106d2cbb122ac818069610115f6e0dbe80c64def94562d05a6a414ea99c6361600d570dfda933a1b4546eff376e6d3f3376ba89a39111bccb664755f40e1dc7dc973fce23e4d1a3af51f7851052ed0f7ce5e84ac66fbed52bf9babcda4235bb55404c0da0d0e9f3cc8e903e0cd70bdd0fe880cf28715fe421af9042ee0ebe3919e2189601c8b6e3031608f2b97a06c1fa9f8ddd8d27b3149a477a4f9463f75f46a5bdbc35c66ef57da784994cc9b648081816b4a02fbfc64e5bbf2ae6dfd3adea60925302536a0f1272fc016aba37b2dd2713e369dcc3afb902b93f9885e620694ba800702f5c62300ff1cfb35e0595433dc69b754928262f65fbfdb1fb68b114bfe1796b40f9af09f7cba6a20990c3cd6259a941de04170ac62226147c05a7b4d00a7f6ca84159032175d4463a089bd1c8cf57d5176ee82593381be27201c9e43cb2d39a47091096eab7af16d914b906289d2359c7a55df6b634acf168bb06a224c0e41945b57e808d4000af6e5d47b11e1d3dbae79e77d9349e57441ce28cbbc539f48823647a28672f6d9abdd826256960f1554db7b63f543d1d5dd6008646060ce608ba3206b4e82c33b48af6f6bd56aaf7f5a593edcc568431c0b26fd9c532db745b80f352745025cdc3753f35cfc4f78a6b69b60b551e1bfdbb340c7a95a0fecc1cfcf2ac0b236c33713bc9f11da42ac23808095d0de8240735880ddebdd5cd11a8a1ee4d05f2d69361628858dd8e91a61d39d0d6f1514ec4650827b5b7d9a699eae3edcf42dcec7b52ecd8d5fac4fb84618fc64a73af02a35646d9798930ecc4f734852e709b21fdc0af62272e7057701fd25c0f0ae0a13ad10fb0c5bfd8f44e56064925c767c74a93d234a3130703ba297c160fe8d1cbe9ad02cfbd45082c1ae6ee8942dc4823c5c5b14c25f3665edd95a9d02fe07fbd237bb875a4bd653784e626e1570826d94d604ad57d7c2e50c355c78f5e007fa4f675fa365c4709544bd8dfa9507c6c948118dc9f7fc245f203f5bb752502149313dc71be4917d85b0953124cc9115e00c577c1f5f70a138e8bf3c0019cf37572f097688b0096db606088970d86f4927160d0fbc005e6c49a7d3168682ca8c52dcd73351062c97fe1a3f97738e349ed52b98e9cbb04ecdbcd1076ae9396d1fc0c84f1390d3221a2c56ba3cde1f65a757eb6016bec2ca75fcc521e1f6aa4846c88d3e9296076d70fe9c2b119816606c687534471c38e380982461c5a2d43fbe98ddbb69979e9831d8660627ad529315ea60213b5aea1861460012245c6aed614541637c77b3052a649e9249eba771aa81ed3fc80618bdd4a98814c8b84e81d4cc3dab62b5187a23d126a190b461feb40704464d331f76a64470f23675772950ab3e89dfb594b34fc4a8a375a359d8c31823dc1a497e3a278d9a0470ad88c1d5e6b6eab78484c0d16f9873635d6c6751fa9277b9e6f486741c356062c84d9dd78c4422330d59538c238e5fe34baec7cde82e142a26ad027c10a4d0dbf829e0165eb0dfd8b0740a5db97ea0d795a9eca3e2f7db0cb3a2ae65c64fd73bd1affee7e7cb43e0f3a99f2646174f3fc6c70a76affea4671823e0578b5f6fc91e072b7459afc5b7c278b67eea37d2a0a296020d864e0c89f7f74ae7ea1f7f028c548c834020c58fd2f37d262d95745b764473a081214b5a9fe99a0ba2659cb70adb557cbe2ffd3bd561154c198ee9795b14c4fe48767aceade648ea5e74be62f1b2ee1a72a1d573490770f868f2dfdbcaa33bab8d07999ea115cb183d9d034078a160d4954fde647495548ea0dcfd72861d0b2f6abdba980f5b47a6dda5f4ec593e7361a162f11b1eab651cb8d9c35af8cf1367209dd1eb2a097db3ad63ea16369cd011fe25f62f0eb82b882ca5d6f5a88a3ec122b62cfe382116424579bba1f064e044d3ec6e64bdbd0f646bcfd9481341f925fef4da00e15215e8cd1a2ed6c291535c538632f66d45bbde71cbf7e35853a6009ff19890671145724ff2a1bbd90fb6c2d6d6629c5d1a12773ea45b5e22f1fbe36ea03683519c687aec4e776a05bf8a3c2ec0b4e1620d5a99a7ce7734ce6a48bef1f3761a74b9e2ae707b548b4e9ad35ddb03df126d45182151659c6bb585c7d97b94dc2f5e6169b6f97b163c45b80481ecf1841052a7402fb7cfe7eee8e94ce2c2d518e57c326afe17b5a5b6c007f1d86d152070b0897f18cc7f35a94d57f27b66e8af243b9552a98dab0f39d22120bea5aa7d8780de59425c50d98d700e5fe834db403fae49dfb9233115837d6a5f25770d6eb183f8f286dbb9dc180d57b6dbd64ba5555843312c9acb32a195b11985692128e75935df39772dfd7a858a5e3b8b67b158a36fc1cb8242a6f00d386905b17eca4804716efff1efc93764c6b398bab1e2163f0b7fd9c715e02d0e20d9e2aeb2812a2cf1c3ae923c8e3e3210353a3ad227cc054265e6f91797953cf9dfa16db6aa39932a37cce5421bf62250a85aace78dd709b82d0241d06728c0410808f94123af22db88964c6dd68d80b95886a2384b23faedb2e3955387f2ca3e650a11bf10ee46927e838d002e00cb85063a4ee7e4cd56f973de8d8be1275b3c72651d3b5bf92cab8eba9b6d87d9dc0ecdaec63f491f9d4cf697df5f91512fd0e3f438133fb4d503d7809520a39ba1899acae232a57d0dca9ecf2bd0a5355681b9583dc866c400bd5fea055e252a71a81939233b0c53f1d7e98c9c62443316559b5d618197bf11cff8ee7059374f7a4bfa8cbbdd7d03691bb4b478ac90b99c450a878529159fd34f70eaa8a05df46e0745d8d789b2627c42da91c9c11350d0856c89c16cc99411c020d6b1f1fbf0e9e2f97e930646114ad89d86bf87fef506d8137f300e84eaf11c2f6ba79c2f8a19bb2577a830c5754c8a5675e5c4d7db4c0bf58646571aae3155865ab10c88555c12fc56fd88da85a72940eeffe18c7c9b9ee3e13e2ef951136e1ac44329f796ac2315eef9fa6ab95b96618735b2a9cc92e18fb9a04a4f9bc7de7cad66c74e793b7cb2a5c951f8bce63f01ee353ad664a3926107df03a256068de36b4e6179f38d49fc1f40ededa1595267ed961597f84c9266bfe4a1c28c314a1945dd75f0b442753ed038a1c14508f0881b2086dcb5b9da707199298f00fc5ba1906d55c59d115320e1d22a7e6ee3057b0ab6db42f3a5888caff900710c975b7b52bfc63b98da2ec1f8f072c56c04d38ca31857e1082952e7aafd5e4e4b83b9d78e7588be63bbb971cd301324c4f571f5f68187ca3daaf29ed4292a5af2660f39e9b1730209ec824630596e231ff0963b807149a2c54e3bb46a0da8c26db0def626311ad8aecc44f98fc9cb06030941715b95aa51b7d8b52b0f2f1da98d95e32cadf40b402a86ea6832f2eb6e4a887ac11101eeb918b7a086c465da403f4f65c38eef63", 0x1000) creat(&(0x7f0000001640)='./file0\x00', 0x4) rt_sigtimedwait(&(0x7f0000001680)={[0x8]}, &(0x7f00000016c0), &(0x7f0000001740)={0x77359400}, 0x8) r7 = open(&(0x7f0000001840)='./file0\x00', 0x200600, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000001a00)={&(0x7f0000001880), 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x94, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x55, 0xac, "ee758c23798832d63cfdc2fdfd50a75b5323dfa3887b61b867376d503b05425ba8c640f6f746b3f814655c9e97df7b3944f0ca755ddb8dd63440a102aac5c4d28f580c089c220235e0116dec716c3a8ba8"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5640}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c00}, 0x20000000) io_uring_enter(r3, 0x1ff, 0x6ca, 0x4, &(0x7f0000001a40), 0x8) r9 = syz_open_pts(0xffffffffffffffff, 0x400) ioctl$KDGKBENT(r9, 0x4b46, &(0x7f0000001a80)={0x80, 0x1, 0x20}) [ 57.096408][ T22] audit: type=1400 audit(1580376054.102:15): avc: denied { map } for pid=1918 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1043 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 57.272461][ T1924] cgroup1: Unknown subsys name 'perf_event' [ 57.285273][ T1925] cgroup1: Unknown subsys name 'perf_event' [ 57.298808][ T1924] cgroup1: Unknown subsys name 'net_cls' [ 57.299553][ T1926] cgroup1: Unknown subsys name 'perf_event' [ 57.305202][ T1927] cgroup1: Unknown subsys name 'perf_event' [ 57.311061][ T1925] cgroup1: Unknown subsys name 'net_cls' [ 57.322575][ T1926] cgroup1: Unknown subsys name 'net_cls' [ 57.330366][ T1927] cgroup1: Unknown subsys name 'net_cls' [ 57.333652][ T1928] cgroup1: Unknown subsys name 'perf_event' [ 57.343547][ T1930] cgroup1: Unknown subsys name 'perf_event' [ 57.349630][ T1930] cgroup1: Unknown subsys name 'net_cls' [ 57.353236][ T1928] cgroup1: Unknown subsys name 'net_cls' [ 61.043091][ T22] audit: type=1400 audit(1580376058.052:16): avc: denied { associate } for pid=1925 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 61.104718][ T22] audit: type=1400 audit(1580376058.112:17): avc: denied { create } for pid=4238 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 61.130212][ T22] audit: type=1400 audit(1580376058.112:18): avc: denied { write } for pid=4238 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 61.157884][ T22] audit: type=1400 audit(1580376058.132:19): avc: denied { read } for pid=4238 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 09:20:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd700006dcdf250200000008000b00050000000a0009c337e9be0400cdff000a00096bd7715769795c296522ee88d57180d2576446790000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24008890) r4 = socket(0x0, 0x3, 0x0) bind$packet(r4, 0x0, 0x0) accept(r0, 0x0, &(0x7f0000000000)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000a1}, 0x30) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 61.241632][ T22] audit: type=1400 audit(1580376058.242:20): avc: denied { open } for pid=4287 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 09:20:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x0, 0x2102, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/if_inet6\x00') fcntl$dupfd(r4, 0x0, r5) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x686, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0xfff, 0x0, 0x40000}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x9, 0x4, &(0x7f0000000600)=[{&(0x7f0000000400)="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", 0x111, 0xfffffffffffffffe}, {&(0x7f00000006c0)="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", 0x1000, 0x73}, {&(0x7f0000000300)="1265a1b89b06e912122087adad31466c8ea60c500f93c5e18fba326b4bc2fc6e4368834e743ed08a7e1100fdaf07488ced16002b8410a2e98a24d42a", 0x3c, 0x7}, {&(0x7f0000000580)="af8309beb318a81c843974ec9b757a805f9a294a504b33b5c4f6f20f2e30eddd3a28b2d5d950572aedb7365b4d13bc4cd0378865b7bff33901a95160e5d4067cc47879c0931317a9c36a2068e88d55bcef884c0855b00a5dae64d910462f0731a8f6e7d4094a1958ccc24eb39ed587e2318a1a62", 0x74, 0x3}], 0x50, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x880, 0x24) fchdir(r6) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) clock_gettime(0x7, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000100)={0x1f, 0x6, 0xfffffffffffffff9, 0x80, 0x8, 0x2, 0x9, 0x109}, &(0x7f0000000180)={0xbf57, 0x200, 0x8, 0x5, 0x9, 0x8, 0x3, 0x20}, &(0x7f00000001c0)={0xffffffff, 0x1, 0x8, 0xf2d, 0x6, 0x7fff, 0x1ff, 0xffffffff}, &(0x7f0000000340)={r8, r9/1000+10000}) r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x8400fffffffa) sendfile(r7, r10, 0x0, 0x280900) [ 61.273800][ T22] audit: type=1400 audit(1580376058.272:21): avc: denied { kernel } for pid=4287 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 61.363780][ T22] audit: type=1400 audit(1580376058.372:22): avc: denied { create } for pid=4287 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 61.391725][ T22] audit: type=1400 audit(1580376058.372:23): avc: denied { getopt } for pid=4318 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 61.451783][ T4347] FAT-fs (loop3): invalid media value (0x29) [ 61.458438][ T4347] FAT-fs (loop3): Can't find a valid FAT filesystem 09:20:58 executing program 2: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000000040000a8000000a8000000a80100008002000000000000680300006803000068030000680300006803000005000000", @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e626848f903cd828f98806bcc6606127c585b068660d89707f027c4d5231c7859650182b6a1546c0abb71d12526985cb8df56303b874258d6d5059f2904947e12d9f2006d193f90d9ef84898b483b9c717b17e6d188ae26a5ae4d62a2e2927d2e89bd6da826f26e5411b5e0390e1f752860cd89f027ea0b8f5b67adbf32ce99bd1254939d5a05c5b28af15916bffbb6f3099762789bd79"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a800000000000000000000000000000000000000000038005245444952454354000000000000000000000000000000000000000000000100000000000000ac1414bbe0000001006409000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80000010000000000000000000000000000000000000000300061680000000000000000000000000000000000000000000000000000000001000100000000000100000000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534e41540000000000000000000000000000000000000000000000000000010000001b000000ac141416000000004e244e2400000000ac1414aaac14140affffff00ffffff00726f7365300000000000000000000000767863616e310000000000000000000000000000000000000000000000000000ff0000000000000000000000000000001d00034000000000a000d800000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000400000800000000000000000000000038004e45544d41500000000000000000000000000000000000000000000000000100000003000000ffffffffffffffff0800ff7f00000000ac141438ac1414bb000000000000000076657468305f746f5f627269646765006e657464657673696d3000000000000000000000000000000000000000000000ff0000000000000000000000000000003200020400000000b000e8000000000000000000000000000000000000000000400073657400000000000000000000000000000000000000000000000000000001000000020000000600000004000000010000000b00000001000000010500003800444e415400000000000000000000000000000000000000000000000000000100000010000000ac1414bbe00000014e204e2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x460) lsetxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@random={'trusted.', 'overlay\x00'}, &(0x7f00000008c0)='\x00', 0x1, 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r3 = socket(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x1, 0x0, 0xffffffffffffffff) chdir(&(0x7f00000002c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file1\x00', 0x120) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000000140)=""/165, 0x407) 09:20:58 executing program 5: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) fchmod(r0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fchownat(r1, 0xfffffffffffffffe, r2, r3, 0x800) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000) lsetxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000280)) openat$cgroup_ro(r1, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) r5 = epoll_create(0x158) fsetxattr$security_ima(r5, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@md5={0x1, "95d937ee3136db7d647be6332998fd92"}, 0x11, 0x2) r6 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@ethernet={0x0, @dev}, &(0x7f0000000400)=0x80, 0x800) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000440)={'vlan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}}) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000600)={0x6, 0x8}, 0x8) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x1a5140, 0x0) ioctl$LOOP_CLR_FD(r8, 0x4c01) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002780)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002800)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f00000029c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002840)={0x140, r10, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0xc000) pipe2(&(0x7f0000002a00), 0x80800) r11 = add_key$user(&(0x7f0000002a40)='user\x00', &(0x7f0000002a80)={'syz', 0x1}, &(0x7f0000002ac0)="7f187ca0f7c8b148539c874e509391063f5acedc983e1964f0432ad4ed0493be27a985ec806265a9f9ed4e96a0", 0x2d, 0x0) keyctl$reject(0x13, r11, 0x10000, 0x2, 0xfffffffffffffffd) openat$vsock(0xffffffffffffff9c, &(0x7f0000002b00)='/dev/vsock\x00', 0x1, 0x0) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000002b80)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0xc0000800}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x24, r12, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x9000}, 0x20000000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000002cc0)={@empty, @empty, 0x0}, &(0x7f0000002d00)=0xc) connect$packet(r8, &(0x7f0000002d40)={0x11, 0x4, r13, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 09:20:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x4) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) ftruncate(r3, 0x408) 09:20:58 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00') socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x202, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x6e5008989ef5ad49}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a2", 0x1) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) [ 61.518332][ T4358] x_tables: duplicate underflow at hook 1 [ 61.534306][ T4358] x_tables: duplicate underflow at hook 1 [ 61.547680][ T4359] overlayfs: filesystem on './file0' not supported as upperdir 09:20:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfa, 0xfffffffffffffffc, 0x20, 0x1000}, 0x0) sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socket(0x400000000000010, 0x802, 0x0) dup(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffb) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000b80)="8eac6be419c8f30ab18fd91f9d2e65d950f82f1ef68ad33d59d423d7984382ca124e7cf8203ebe69619302ad94c3778bda6f", 0x32}, {&(0x7f0000000440)="961fb9da0050c1987f2330f16839e1b7dad4b5213b86129ff758253a72f4105092304e74569f8455b9c2a35b730efd3a7ea050df2d40f70b7cdb3474e77e812f4b3b34c6ee572a05a4eaacfe0dfa289e8136d69adf58d44ea62f293dade773c169298f315ffa6c3a0910564a72ccbe1fcf6975340896171ae1c9645b7ec6cfcfa9642d2094", 0x85}], 0x2, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x8000}, {&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a40), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f507ffa23cd5a80000686344b0858c3e6292abe30043c12c37258e0000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32], 0x20, 0x884}], 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x0, 0x14d9f47d5e1079f3, &(0x7f000000c940)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000005c0)='./file0\x00') [ 61.641564][ T4374] attempt to access beyond end of device [ 61.651284][ T4374] loop2: rw=2049, want=78, limit=63 [ 61.669918][ T4374] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 61.679680][ T4374] attempt to access beyond end of device [ 61.690809][ C0] hrtimer: interrupt took 23553 ns [ 61.699247][ T4374] loop2: rw=2049, want=79, limit=63 [ 61.704708][ T4374] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 61.713419][ T4374] attempt to access beyond end of device [ 61.719207][ T4374] loop2: rw=2049, want=80, limit=63 [ 61.724670][ T4374] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 61.733788][ T4374] attempt to access beyond end of device [ 61.740859][ T4374] loop2: rw=2049, want=81, limit=63 [ 61.746528][ T4374] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 61.757025][ T4374] attempt to access beyond end of device [ 61.763542][ T4374] loop2: rw=2049, want=130, limit=63 [ 61.771059][ T4374] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 61.771305][ T4347] FAT-fs (loop3): invalid media value (0x29) [ 61.786012][ T4347] FAT-fs (loop3): Can't find a valid FAT filesystem [ 61.795128][ T4374] attempt to access beyond end of device [ 61.800910][ T4374] loop2: rw=2049, want=131, limit=63 [ 61.806354][ T4374] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 61.815179][ T4374] attempt to access beyond end of device [ 61.820884][ T4374] loop2: rw=2049, want=132, limit=63 [ 61.838323][ T4374] Buffer I/O error on dev loop2, logical block 131, lost async page write 09:20:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x21, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x280900) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="159e79401f1ec5460d534022e38433c336571e0422c9f9c9c4672ce9068138", @ANYRES32=0x0, @ANYBLOB="6e6179152dd81d05bb056b66114ec686a65724620e56a01ad523259746d5a6e8309a6311ec45195f99704dd3bab681f5b232e820930e8de423ed4c310f84ec7834eb55863a6d53b1e40449890eebbfa3425e66f6409abb7fc441ab4930901a60f25e39a9be1305715d1d187b03f91860f35f663742f27bd4788ed0c10be5f01d19c49358cd02d0fc511bfdd8cfc6eb44a8010ebb"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 61.894547][ T4374] attempt to access beyond end of device [ 61.924978][ T4374] loop2: rw=2049, want=133, limit=63 [ 61.933317][ T4374] Buffer I/O error on dev loop2, logical block 132, lost async page write 09:20:59 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00') socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x202, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x6e5008989ef5ad49}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a2", 0x1) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) [ 61.962077][ T4374] attempt to access beyond end of device [ 61.972512][ T4374] loop2: rw=2049, want=142, limit=63 [ 61.978200][ T4374] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 61.987334][ T4374] attempt to access beyond end of device [ 62.000726][ T4374] loop2: rw=2049, want=143, limit=63 09:20:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd700006dcdf250200000008000b00050000000a0009c337e9be0400cdff000a00096bd7715769795c296522ee88d57180d2576446790000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24008890) r4 = socket(0x0, 0x3, 0x0) bind$packet(r4, 0x0, 0x0) accept(r0, 0x0, &(0x7f0000000000)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000a1}, 0x30) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 09:20:59 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00') socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x202, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x6e5008989ef5ad49}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a2", 0x1) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) [ 62.033505][ T4374] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 62.048233][ T4374] attempt to access beyond end of device [ 62.058971][ T4374] loop2: rw=2049, want=144, limit=63 [ 62.064601][ T4374] attempt to access beyond end of device [ 62.070491][ T4374] loop2: rw=2049, want=145, limit=63 09:20:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x4) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) ftruncate(r3, 0x408) [ 62.180415][ T1955] attempt to access beyond end of device [ 62.186567][ T1955] loop2: rw=1, want=156, limit=63 [ 62.361699][ T4446] attempt to access beyond end of device [ 62.381983][ T4446] loop2: rw=2049, want=78, limit=63 [ 62.389988][ T4446] attempt to access beyond end of device [ 62.396107][ T4446] loop2: rw=2049, want=79, limit=63 [ 62.402301][ T4446] attempt to access beyond end of device [ 62.425902][ T4446] loop2: rw=2049, want=80, limit=63 [ 62.439502][ T4446] attempt to access beyond end of device [ 62.446309][ T4446] loop2: rw=2049, want=81, limit=63 09:20:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x21, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x280900) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="159e79401f1ec5460d534022e38433c336571e0422c9f9c9c4672ce9068138", @ANYRES32=0x0, @ANYBLOB="6e6179152dd81d05bb056b66114ec686a65724620e56a01ad523259746d5a6e8309a6311ec45195f99704dd3bab681f5b232e820930e8de423ed4c310f84ec7834eb55863a6d53b1e40449890eebbfa3425e66f6409abb7fc441ab4930901a60f25e39a9be1305715d1d187b03f91860f35f663742f27bd4788ed0c10be5f01d19c49358cd02d0fc511bfdd8cfc6eb44a8010ebb"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:20:59 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00') socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='system{em0/&vboxnet1^\x00', 0xfffffffffffffffa) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) socket$inet6(0xa, 0x400000000803, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x202, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x6e5008989ef5ad49}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="a2", 0x1) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 09:20:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x21, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x280900) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="159e79401f1ec5460d534022e38433c336571e0422c9f9c9c4672ce9068138", @ANYRES32=0x0, @ANYBLOB="6e6179152dd81d05bb056b66114ec686a65724620e56a01ad523259746d5a6e8309a6311ec45195f99704dd3bab681f5b232e820930e8de423ed4c310f84ec7834eb55863a6d53b1e40449890eebbfa3425e66f6409abb7fc441ab4930901a60f25e39a9be1305715d1d187b03f91860f35f663742f27bd4788ed0c10be5f01d19c49358cd02d0fc511bfdd8cfc6eb44a8010ebb"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:20:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) eventfd2(0x80000000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x3) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000180)={'veth1_to_hsr\x00', {0x2, 0x4e22, @loopback}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0xffffff01, 0x4) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x15) sendfile(r5, r1, 0x0, 0xa198) 09:20:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x21, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x280900) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="159e79401f1ec5460d534022e38433c336571e0422c9f9c9c4672ce9068138", @ANYRES32=0x0, @ANYBLOB="6e6179152dd81d05bb056b66114ec686a65724620e56a01ad523259746d5a6e8309a6311ec45195f99704dd3bab681f5b232e820930e8de423ed4c310f84ec7834eb55863a6d53b1e40449890eebbfa3425e66f6409abb7fc441ab4930901a60f25e39a9be1305715d1d187b03f91860f35f663742f27bd4788ed0c10be5f01d19c49358cd02d0fc511bfdd8cfc6eb44a8010ebb"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:20:59 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141040, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) r4 = socket(0x10, 0x2, 0x0) io_submit(r3, 0x2, &(0x7f00000007c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="ba", 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x5, 0x0, r4, 0x0, 0x2}]) 09:20:59 executing program 1: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000800001900800000e00000010000000000000062c0a486beb56de128b9d0ea8f7acd362e24a37103de9564da8d13318dccc5d9ee8de46719cf70bd2293f44a16208ecbff64fd7837339235588e75c74be9c25dc60f34e6488cb2d1c5da18089436ce86d3d5b71523415f3f1db5e82cab7fc78d887f2528001b2e5656c6896dc5ee6c10eee904f2ebd9ed4c6ad8c95965d4d009c2b8d409032f136a067392f4e1ee2cb441d95f12db1d1fd0a200fc5c8657b45c1be1dcbb4138d2d2cd642f33f41cd704cce8b2805a02cd3bc0668146ceb4d1023e55f3b6f7cf4a0e83cffcb820aff7ccdeead03370b815391cad8854078cd0", @ANYRES32, @ANYBLOB="fb2824ff00000000000007c6f6ba72d9001d00000000000000cf0000ff000000000044fd027a30e75d1884a988ad922c0b847e3970378cf14e398f88a745fca07adf35c245c49b6f0220875dc5f7af309e04"]) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000580)=""/120) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000680)={0xd, 0xb4d0}) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) socket(0x1, 0x5, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r7, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) sendmsg(r5, &(0x7f0000000500)={&(0x7f0000000300)=@phonet={0x23, 0x91, 0x9, 0x80}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="8b79e2a2fe95366f630ff17bca874d6e4f11be55c78feda16030f70a276a11d9c24f7325cec42c1246b8ace0defa185217dad191f84c0fe7d4", 0x39}], 0x1, &(0x7f00000007c0)=[{0x58, 0x111, 0xc1, "852335e5ee81386d30ece70ec0570ddd21e8cd50d4980e32fcc235a8dc4d2929d123ec5015b17363e0aaaaf15e80dc09a1b7c89d366d0620e1dfc105622f6e564c4dd0a58f7047"}, {0x40, 0x115, 0xfffffffc, "04fe593ff11f4e99b93e4d0a0108bf2905b1064be5e8a77c4b0a3dfcf670cd8a1ca36cb3414259e9b67d7e47"}, {0x78, 0x10d, 0x0, "06ef24b24e13edbb48f698355a877ca935693fa70c58a222281ce5214f6d0d3ecc9e0655e1e3c59c2074e3b38e7566c25eac9771a2830ec0bb1944b60255321bc39eba3f23b564a6deb8dd4a315d1d45d7215dae1b90fb820b986af541c3143a8239"}, {0x50, 0x29, 0x7, "e6dbba8ba4f7a3ba1b1f6c219e0a2f675bca357d5612cf32058527f7765d8049f6d46f956e92ba4b930fd93b132fac369dc88326c4f3c6ce55b7e4268f"}, {0x10, 0x84, 0x7ff}, {0x68, 0x3a, 0x400, "c9ba0cfcf617457705c01b705ddac2892e07f089e1a4086d444d778ab3b285c7f5fcc7b6ad861a12c1692888ba1287385b936b12baf6db92daf7b8135b3a4515d0e2c84c6b214308398eba13125bce0a2299474623e9c1"}, {0x20, 0x187, 0x3, "762d219e731baf2481bbcb93456626"}, {0x78, 0x1, 0xf32, "5b821c7002e0bb39d30b99dfb858cbc476f68747c47aa8a4394766abfe327d16d6465ec2ab13f02558d42ed9286c810045553dffff3317e79df1f5cc3e0c158ecf60f3a5ac18edd265f000a5e165044bfd8cd39646871cd61186c211f59e8ac472fe20"}], 0x270}, 0x4002) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) pipe(&(0x7f0000000240)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000640), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa0400, 0x0) 09:20:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000100)={{0x2, 0x4e22, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e24, @multicast1}, 'geneve0\x00'}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, [], 0x2b}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x2, 0x0) sched_yield() 09:20:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000580), 0xefee) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000005) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x711080, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x30}}, 0x6004080) 09:20:59 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x3}, &(0x7f00000000c0)=0x28) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000240)) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1cde01, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="8400000003010103000000000000000007000008700002802c000180b12b64e3114ac09914000300fe8800000000bac2000000000000010114000400fe88000072567f540908043ef6cccd2400ce242e9c000000000000000000000106000340000000001400018008000100ac1414bb08000200ac1414aa0c00028005000100010000000c000280050000de060000000c00"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c415) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x3, 0x0, @mcast2, 0x4000}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r11, r12, 0x0, 0x10001) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$TIOCSCTTY(r15, 0x540e, 0x1ff) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400c0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r16, 0x10e, 0x3, &(0x7f0000000200)=0xffff, 0x4) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000340)=""/37) 09:21:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8478071") sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@setneightbl={0x7c, 0x43, 0x10, 0x70bd2c, 0x25dfdbfb, {0x7}, [@NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x340a}, @NDTA_THRESH1={0x8, 0x2, 0x7fff}, @NDTA_PARMS={0x30, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x6}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x2}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0xc1}, @NDTPA_APP_PROBES={0x8, 0x9, 0xa59}]}, @NDTA_NAME={0x11, 0x1, 'eth0vboxnet0\x00'}, @NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x7c}}, 0x8080) 09:21:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) eventfd2(0x80000000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x3) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000180)={'veth1_to_hsr\x00', {0x2, 0x4e22, @loopback}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0xffffff01, 0x4) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x15) sendfile(r5, r1, 0x0, 0xa198) [ 63.552256][ T4463] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 63.568305][ T4463] FAT-fs (loop2): Filesystem has been set read-only [ 63.582461][ T4463] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 17) 09:21:00 executing program 1: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000800001900800000e00000010000000000000062c0a486beb56de128b9d0ea8f7acd362e24a37103de9564da8d13318dccc5d9ee8de46719cf70bd2293f44a16208ecbff64fd7837339235588e75c74be9c25dc60f34e6488cb2d1c5da18089436ce86d3d5b71523415f3f1db5e82cab7fc78d887f2528001b2e5656c6896dc5ee6c10eee904f2ebd9ed4c6ad8c95965d4d009c2b8d409032f136a067392f4e1ee2cb441d95f12db1d1fd0a200fc5c8657b45c1be1dcbb4138d2d2cd642f33f41cd704cce8b2805a02cd3bc0668146ceb4d1023e55f3b6f7cf4a0e83cffcb820aff7ccdeead03370b815391cad8854078cd0", @ANYRES32, @ANYBLOB="fb2824ff00000000000007c6f6ba72d9001d00000000000000cf0000ff000000000044fd027a30e75d1884a988ad922c0b847e3970378cf14e398f88a745fca07adf35c245c49b6f0220875dc5f7af309e04"]) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000580)=""/120) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000680)={0xd, 0xb4d0}) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) socket(0x1, 0x5, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r7, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) sendmsg(r5, &(0x7f0000000500)={&(0x7f0000000300)=@phonet={0x23, 0x91, 0x9, 0x80}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="8b79e2a2fe95366f630ff17bca874d6e4f11be55c78feda16030f70a276a11d9c24f7325cec42c1246b8ace0defa185217dad191f84c0fe7d4", 0x39}], 0x1, &(0x7f00000007c0)=[{0x58, 0x111, 0xc1, "852335e5ee81386d30ece70ec0570ddd21e8cd50d4980e32fcc235a8dc4d2929d123ec5015b17363e0aaaaf15e80dc09a1b7c89d366d0620e1dfc105622f6e564c4dd0a58f7047"}, {0x40, 0x115, 0xfffffffc, "04fe593ff11f4e99b93e4d0a0108bf2905b1064be5e8a77c4b0a3dfcf670cd8a1ca36cb3414259e9b67d7e47"}, {0x78, 0x10d, 0x0, "06ef24b24e13edbb48f698355a877ca935693fa70c58a222281ce5214f6d0d3ecc9e0655e1e3c59c2074e3b38e7566c25eac9771a2830ec0bb1944b60255321bc39eba3f23b564a6deb8dd4a315d1d45d7215dae1b90fb820b986af541c3143a8239"}, {0x50, 0x29, 0x7, "e6dbba8ba4f7a3ba1b1f6c219e0a2f675bca357d5612cf32058527f7765d8049f6d46f956e92ba4b930fd93b132fac369dc88326c4f3c6ce55b7e4268f"}, {0x10, 0x84, 0x7ff}, {0x68, 0x3a, 0x400, "c9ba0cfcf617457705c01b705ddac2892e07f089e1a4086d444d778ab3b285c7f5fcc7b6ad861a12c1692888ba1287385b936b12baf6db92daf7b8135b3a4515d0e2c84c6b214308398eba13125bce0a2299474623e9c1"}, {0x20, 0x187, 0x3, "762d219e731baf2481bbcb93456626"}, {0x78, 0x1, 0xf32, "5b821c7002e0bb39d30b99dfb858cbc476f68747c47aa8a4394766abfe327d16d6465ec2ab13f02558d42ed9286c810045553dffff3317e79df1f5cc3e0c158ecf60f3a5ac18edd265f000a5e165044bfd8cd39646871cd61186c211f59e8ac472fe20"}], 0x270}, 0x4002) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) pipe(&(0x7f0000000240)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000640), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa0400, 0x0) 09:21:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000580), 0xefee) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000005) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x711080, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x30}}, 0x6004080) 09:21:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 64.321931][ T1930] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 20) [ 64.330937][ T1930] FAT-fs (loop5): Filesystem has been set read-only [ 64.809009][ T4548] cgroup1: Unknown subsys name 'perf_event' [ 64.815207][ T4548] cgroup1: Unknown subsys name 'net_cls' [ 65.621295][ T4915] cgroup1: Unknown subsys name 'perf_event' [ 65.627844][ T4915] cgroup1: Unknown subsys name 'net_cls' 09:21:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000580), 0xefee) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000005) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x711080, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x30}}, 0x6004080) 09:21:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:21:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000580), 0xefee) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000005) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x711080, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x30}}, 0x6004080) [ 67.577647][ T5247] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 20) 09:21:04 executing program 0: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000800001900800000e00000010000000000000062c0a486beb56de128b9d0ea8f7acd362e24a37103de9564da8d13318dccc5d9ee8de46719cf70bd2293f44a16208ecbff64fd7837339235588e75c74be9c25dc60f34e6488cb2d1c5da18089436ce86d3d5b71523415f3f1db5e82cab7fc78d887f2528001b2e5656c6896dc5ee6c10eee904f2ebd9ed4c6ad8c95965d4d009c2b8d409032f136a067392f4e1ee2cb441d95f12db1d1fd0a200fc5c8657b45c1be1dcbb4138d2d2cd642f33f41cd704cce8b2805a02cd3bc0668146ceb4d1023e55f3b6f7cf4a0e83cffcb820aff7ccdeead03370b815391cad8854078cd0", @ANYRES32, @ANYBLOB="fb2824ff00000000000007c6f6ba72d9001d00000000000000cf0000ff000000000044fd027a30e75d1884a988ad922c0b847e3970378cf14e398f88a745fca07adf35c245c49b6f0220875dc5f7af309e04"]) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000580)=""/120) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000680)={0xd, 0xb4d0}) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) socket(0x1, 0x5, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r7, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) sendmsg(r5, &(0x7f0000000500)={&(0x7f0000000300)=@phonet={0x23, 0x91, 0x9, 0x80}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="8b79e2a2fe95366f630ff17bca874d6e4f11be55c78feda16030f70a276a11d9c24f7325cec42c1246b8ace0defa185217dad191f84c0fe7d4", 0x39}], 0x1, &(0x7f00000007c0)=[{0x58, 0x111, 0xc1, "852335e5ee81386d30ece70ec0570ddd21e8cd50d4980e32fcc235a8dc4d2929d123ec5015b17363e0aaaaf15e80dc09a1b7c89d366d0620e1dfc105622f6e564c4dd0a58f7047"}, {0x40, 0x115, 0xfffffffc, "04fe593ff11f4e99b93e4d0a0108bf2905b1064be5e8a77c4b0a3dfcf670cd8a1ca36cb3414259e9b67d7e47"}, {0x78, 0x10d, 0x0, "06ef24b24e13edbb48f698355a877ca935693fa70c58a222281ce5214f6d0d3ecc9e0655e1e3c59c2074e3b38e7566c25eac9771a2830ec0bb1944b60255321bc39eba3f23b564a6deb8dd4a315d1d45d7215dae1b90fb820b986af541c3143a8239"}, {0x50, 0x29, 0x7, "e6dbba8ba4f7a3ba1b1f6c219e0a2f675bca357d5612cf32058527f7765d8049f6d46f956e92ba4b930fd93b132fac369dc88326c4f3c6ce55b7e4268f"}, {0x10, 0x84, 0x7ff}, {0x68, 0x3a, 0x400, "c9ba0cfcf617457705c01b705ddac2892e07f089e1a4086d444d778ab3b285c7f5fcc7b6ad861a12c1692888ba1287385b936b12baf6db92daf7b8135b3a4515d0e2c84c6b214308398eba13125bce0a2299474623e9c1"}, {0x20, 0x187, 0x3, "762d219e731baf2481bbcb93456626"}, {0x78, 0x1, 0xf32, "5b821c7002e0bb39d30b99dfb858cbc476f68747c47aa8a4394766abfe327d16d6465ec2ab13f02558d42ed9286c810045553dffff3317e79df1f5cc3e0c158ecf60f3a5ac18edd265f000a5e165044bfd8cd39646871cd61186c211f59e8ac472fe20"}], 0x270}, 0x4002) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) pipe(&(0x7f0000000240)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000640), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa0400, 0x0) 09:21:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000580), 0xefee) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000005) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x711080, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x30}}, 0x6004080) 09:21:04 executing program 2: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000800001900800000e00000010000000000000062c0a486beb56de128b9d0ea8f7acd362e24a37103de9564da8d13318dccc5d9ee8de46719cf70bd2293f44a16208ecbff64fd7837339235588e75c74be9c25dc60f34e6488cb2d1c5da18089436ce86d3d5b71523415f3f1db5e82cab7fc78d887f2528001b2e5656c6896dc5ee6c10eee904f2ebd9ed4c6ad8c95965d4d009c2b8d409032f136a067392f4e1ee2cb441d95f12db1d1fd0a200fc5c8657b45c1be1dcbb4138d2d2cd642f33f41cd704cce8b2805a02cd3bc0668146ceb4d1023e55f3b6f7cf4a0e83cffcb820aff7ccdeead03370b815391cad8854078cd0", @ANYRES32, @ANYBLOB="fb2824ff00000000000007c6f6ba72d9001d00000000000000cf0000ff000000000044fd027a30e75d1884a988ad922c0b847e3970378cf14e398f88a745fca07adf35c245c49b6f0220875dc5f7af309e04"]) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000580)=""/120) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000680)={0xd, 0xb4d0}) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) socket(0x1, 0x5, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r7, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) sendmsg(r5, &(0x7f0000000500)={&(0x7f0000000300)=@phonet={0x23, 0x91, 0x9, 0x80}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="8b79e2a2fe95366f630ff17bca874d6e4f11be55c78feda16030f70a276a11d9c24f7325cec42c1246b8ace0defa185217dad191f84c0fe7d4", 0x39}], 0x1, &(0x7f00000007c0)=[{0x58, 0x111, 0xc1, "852335e5ee81386d30ece70ec0570ddd21e8cd50d4980e32fcc235a8dc4d2929d123ec5015b17363e0aaaaf15e80dc09a1b7c89d366d0620e1dfc105622f6e564c4dd0a58f7047"}, {0x40, 0x115, 0xfffffffc, "04fe593ff11f4e99b93e4d0a0108bf2905b1064be5e8a77c4b0a3dfcf670cd8a1ca36cb3414259e9b67d7e47"}, {0x78, 0x10d, 0x0, "06ef24b24e13edbb48f698355a877ca935693fa70c58a222281ce5214f6d0d3ecc9e0655e1e3c59c2074e3b38e7566c25eac9771a2830ec0bb1944b60255321bc39eba3f23b564a6deb8dd4a315d1d45d7215dae1b90fb820b986af541c3143a8239"}, {0x50, 0x29, 0x7, "e6dbba8ba4f7a3ba1b1f6c219e0a2f675bca357d5612cf32058527f7765d8049f6d46f956e92ba4b930fd93b132fac369dc88326c4f3c6ce55b7e4268f"}, {0x10, 0x84, 0x7ff}, {0x68, 0x3a, 0x400, "c9ba0cfcf617457705c01b705ddac2892e07f089e1a4086d444d778ab3b285c7f5fcc7b6ad861a12c1692888ba1287385b936b12baf6db92daf7b8135b3a4515d0e2c84c6b214308398eba13125bce0a2299474623e9c1"}, {0x20, 0x187, 0x3, "762d219e731baf2481bbcb93456626"}, {0x78, 0x1, 0xf32, "5b821c7002e0bb39d30b99dfb858cbc476f68747c47aa8a4394766abfe327d16d6465ec2ab13f02558d42ed9286c810045553dffff3317e79df1f5cc3e0c158ecf60f3a5ac18edd265f000a5e165044bfd8cd39646871cd61186c211f59e8ac472fe20"}], 0x270}, 0x4002) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) pipe(&(0x7f0000000240)) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000640), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa0400, 0x0) 09:21:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000580), 0xefee) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000280)='t\x05\x00\x00\x00\x8c\x00\x822@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe8\xfe\xd6\xa6\xea', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000005) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x711080, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x30}}, 0x6004080) [ 67.626216][ T5247] FAT-fs (loop1): Filesystem has been set read-only [ 67.661441][ T5247] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 20) 09:21:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = creat(0x0, 0x10) clock_adjtime(0x5, &(0x7f0000000400)={0x0, 0x7fd, 0x87, 0x6, 0xdb, 0x3, 0xa8, 0x2e, 0x40, 0xbbcf, 0xfd70, 0x6, 0x0, 0x2, 0x0, 0x0, 0x800, 0x6, 0x1, 0x1, 0x8f, 0x5, 0x8, 0x9, 0x9, 0x56}) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) close(0xffffffffffffffff) r1 = socket(0x0, 0x800000003, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002ec0), 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x88, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc92c6c004b091acd}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000041}, 0x24008010) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58ee00005bf632839c1c5cfddb2ec637bc208a745992e8eff3e2d8f5e9da18c5612073bff747f9e1d7", @ANYRES16=r3, @ANYBLOB="b61eb6ad9d6435aa52c0b5a6fd040226bd7000fedb277d0bd56e6f7cd03cf10197933e82e28002000000000000"], 0x3}}, 0x4000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) unshare(0x40000000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) 09:21:05 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = geteuid() syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x44, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="7463de90f2b8a6bfa03cc61ddcda3e6c93cc98f8adf43dc213ab69152f2d9fc301df5e11d255fe99e7f90551d60b8574d6d30f7dacca1dac2b8a36db9045bcc04f9251df1f042c0fac10c65fb685de492aad", 0x52, 0xf951}], 0x8412, &(0x7f0000000280)=ANY=[@ANYBLOB="62736464662c6f626a5f757365723d76626f786e6574316d696d656d747970656367726f75706d696d655f747970652c766f6f74636f6e746578743d862687fbaa52b75c2c7569643da38574da6c882f7cd3130d6bad8ef86b161b38e254a6a65644b4da1839b873b547f83fd428ed311cc21f5926514b10f4e1d9ed11d9ee7f8e6de083818ac9c9cda61ac74765c4374b148d74ca85ad38cb04cb6ab2d6ebaec886bd337b3408770774336e17e080c73c92d9eea53af0ba2710c5b3c60d1bfc46cf00"/205, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r6, 0x0, r5) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0', [{0x20, 'ext3\x00'}], 0xa, "0011a71fbd22133663610bf39fb24f763b0be6549624511bad192ed96a867e71632f18fed8d80d0dc908b1c6fe13f6b64b062b874f2d515dea36ee7c0211b2540a0614f82025651d2b7859e21fe6762ddd6f797bc584816ba0477a5a84d5538032d78521f068650aaa4a1840aa40e64c4693b4b4a85487975d2b5015c137588bf7233209b167e6258ee68884ab8f85ad25b8076a62ead98f6bc13b03c1cbe0fff98705dec89132427b16cc48df16f8adc8b1be10e36c01d9a38b4d3c4eafae151c5e46a628ec80fb8cd14f27cc4a96fe9041232da74d0bd7"}, 0xe9) rmdir(&(0x7f0000000000)='./file0\x00') dup2(r0, r1) 09:21:05 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='schedstat\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x5, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 09:21:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000000c0)=""/248) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000061114400000d000004d7000000100000850000000700000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 68.852965][ T22] kauditd_printk_skb: 2 callbacks suppressed [ 68.852973][ T22] audit: type=1400 audit(1580376065.842:26): avc: denied { prog_run } for pid=5433 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 09:21:06 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:06 executing program 2: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x39) [ 69.032168][ T5451] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 69.040659][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.056769][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 09:21:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) [ 69.070070][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.105436][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.118518][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.142734][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.155849][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.169023][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.182349][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.195419][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=5451 comm=syz-executor.0 [ 69.998234][ T5476] cgroup1: Unknown subsys name 'perf_event' [ 70.004385][ T5476] cgroup1: Unknown subsys name 'net_cls' 09:21:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:08 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) 09:21:08 executing program 2: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x39) 09:21:08 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x39) [ 71.733222][ T5883] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:08 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:08 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x39) [ 71.910887][ T5899] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) [ 72.053915][ T5908] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:09 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x39) 09:21:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:09 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:09 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) [ 73.923177][ T5951] cgroup1: Unknown subsys name 'perf_event' [ 73.929258][ T5951] cgroup1: Unknown subsys name 'net_cls' 09:21:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:12 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:12 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:12 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) [ 75.577396][ T6354] selinux_nlmsg_perm: 82 callbacks suppressed [ 75.577406][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48847 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 [ 75.608916][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 09:21:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:12 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) [ 75.644875][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 [ 75.679810][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 [ 75.728273][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 09:21:12 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) [ 75.782994][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 09:21:12 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r1 = getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x400000, 0x0, 0x40000, 0x7473664e}, r1, 0xffffffffffffffff, r0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) [ 75.841898][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 [ 75.913337][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 [ 75.976372][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 [ 76.031731][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6354 comm=syz-executor.0 09:21:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:13 executing program 4: pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) getpgrp(0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:13 executing program 4: pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) getpgrp(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 77.684629][ T6435] cgroup1: Unknown subsys name 'perf_event' [ 77.690713][ T6435] cgroup1: Unknown subsys name 'net_cls' [ 78.653704][ T6832] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 18) [ 78.662400][ T6832] FAT-fs (loop1): Filesystem has been set read-only 09:21:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:15 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:15 executing program 4: pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') pipe(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:15 executing program 4: pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) [ 78.878390][ T6435] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 09:21:16 executing program 4: pipe(&(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:16 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={0x0, r5, 0x18}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:16 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:16 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigpending(&(0x7f00000004c0), 0x8) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:16 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 79.863008][ T6903] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:17 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) [ 79.970291][ T6924] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:17 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) 09:21:17 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000100)=0x1, 0x4) [ 80.083958][ T6941] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 80.312078][ T6939] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 18) [ 80.350530][ T6939] FAT-fs (loop5): Filesystem has been set read-only 09:21:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100), 0x4000) open(0x0, 0x0, 0x0) 09:21:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x1, 0x4) [ 80.633129][ T6955] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 80.642716][ T6955] selinux_nlmsg_perm: 51 callbacks suppressed [ 80.642724][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 [ 80.680103][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 [ 80.705882][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 09:21:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) 09:21:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x1, 0x4) [ 80.746492][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 [ 80.760007][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 [ 80.779038][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 [ 80.792191][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 [ 80.805317][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 [ 80.808680][ T1930] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 80.818149][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 09:21:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r4, 0x0, r3) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x1, 0x4) [ 80.849069][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=6955 comm=syz-executor.0 09:21:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) [ 81.005254][ T6987] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 09:21:18 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 81.227847][ T7007] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 09:21:18 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 81.360860][ T7012] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:21:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100), 0x4) 09:21:18 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 81.865951][ T7031] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:18 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 81.959091][ T7044] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 82.204015][ T7062] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:19 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 82.547310][ T7063] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 18) [ 82.575897][ T7063] FAT-fs (loop2): Filesystem has been set read-only 09:21:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 09:21:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 83.065951][ T1926] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 09:21:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 85.107894][ T7164] cgroup1: Unknown subsys name 'perf_event' [ 85.114185][ T7164] cgroup1: Unknown subsys name 'net_cls' 09:21:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:23 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 09:21:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 86.788766][ T7575] validate_nla: 8 callbacks suppressed [ 86.788772][ T7575] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 86.816732][ T7575] selinux_nlmsg_perm: 263 callbacks suppressed [ 86.816742][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7575 comm=syz-executor.0 09:21:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 86.868388][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7575 comm=syz-executor.0 09:21:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 86.947336][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7575 comm=syz-executor.0 [ 87.031290][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7575 comm=syz-executor.0 09:21:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 87.186451][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7575 comm=syz-executor.0 [ 87.252676][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7575 comm=syz-executor.0 [ 87.257881][ T7610] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 87.291666][ T7610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7610 comm=syz-executor.1 [ 87.296077][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7575 comm=syz-executor.0 [ 87.318033][ T7610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7610 comm=syz-executor.1 [ 87.344497][ T7610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7610 comm=syz-executor.1 09:21:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 09:21:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:24 executing program 0: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) [ 87.633707][ T7616] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 87.656655][ T7617] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:24 executing program 0: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 87.766923][ T7628] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 87.966992][ T7649] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 09:21:25 executing program 0: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:25 executing program 0: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) [ 88.083216][ T7662] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 09:21:25 executing program 0: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 88.523820][ T7672] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 09:21:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:25 executing program 0: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) 09:21:25 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 88.901990][ T7687] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 89.015591][ T7698] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 09:21:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 89.584740][ T7737] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 20) [ 89.612218][ T7737] FAT-fs (loop5): Filesystem has been set read-only 09:21:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) fallocate(0xffffffffffffffff, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xcc, 0x2a, &(0x7f0000000280)="3a9eb3de255f4ad9d417db3efdf6bd379641c8531249b14f56761abc76651ac862a6f7117de75974dbb476831497aea91aaa1792e738d179b3b6a1914e5c42e7394d47d4f9ac3910884e82674bb9ff1f2e1d6b0f8677544a93b6e308a8872bc2a38d707a6c5aad53ddf9e55dc35686a5fe45f2717fdc46d45d4cd58598765db2add6c1b1e9479411ba9f5feed2b0d3cac048835c5217dfa13d6c1b17670ad795f8eae04b60fd4973c1adaec751586240e473ffdc7100144c87a64656a7ca6aa708d89b61615dddde631605a0", &(0x7f0000000040)=""/42, 0x37, 0x0, 0x4f, 0xf7, &(0x7f0000000100)="793cdd123ad5e53414f7ffb263ad3e762955969653f69ef7760b1986838a8cc77c25924bbd66df8d31ee83555fedcc579a417025243464b51a8c1484819d8e90a7dac87f007959de5471d853791d3a", &(0x7f0000000380)="626441f7246d6fba2c80053d98fa9acba4c389ed26d2f192cc7487a61aaea45d605271b20346d79a5208cc7a1dd48f7b23dba5e23bc6c0c1e766a3875a6b30f971307712d6ad384cf20cbb87a81b001a19f125a807542a89b942bfec84a66f2cb5f1e3ffc6b234ca115fc4e120c151bbfb70f441bde35e33e8517b624e3976106302cc822e827065bfab3c1bb149d5e0c2fb331dca6cd9fd50f3374e48ccd070a11e97c9f1d84fbbb3750fa09499cd153544490fbee946b750d4b1f0d2bf9f5a59c9efc93c10354231264de57eadc92fb9aeb21821e48b63057a512b57b6f320c7cdb9896e4fa8fba1671051715ca85c34f5a03da40dfb"}, 0x40) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) fallocate(0xffffffffffffffff, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:28 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:28 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 92.259323][ T7808] cgroup1: Unknown subsys name 'perf_event' [ 92.265650][ T7808] cgroup1: Unknown subsys name 'net_cls' [ 92.987754][ T8145] cgroup1: Unknown subsys name 'perf_event' [ 92.994224][ T8145] cgroup1: Unknown subsys name 'net_cls' 09:21:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:31 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) fallocate(0xffffffffffffffff, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) fallocate(0xffffffffffffffff, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:31 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:31 executing program 1: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 94.328567][ T8628] validate_nla: 3 callbacks suppressed [ 94.328574][ T8628] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 94.362566][ T8628] selinux_nlmsg_perm: 185 callbacks suppressed [ 94.362575][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.421987][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.448088][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.476590][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.502775][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.531849][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.547304][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.560163][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.572970][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 [ 94.603103][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8628 comm=syz-executor.2 09:21:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) fallocate(0xffffffffffffffff, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:31 executing program 1: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) fallocate(0xffffffffffffffff, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 95.693117][ T8658] cgroup1: Unknown subsys name 'perf_event' [ 95.699213][ T8658] cgroup1: Unknown subsys name 'net_cls' [ 96.321252][ T8960] cgroup1: Unknown subsys name 'perf_event' [ 96.327470][ T8960] cgroup1: Unknown subsys name 'net_cls' 09:21:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) fallocate(0xffffffffffffffff, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:34 executing program 1: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:21:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) [ 97.821573][ T1930] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 97.830746][ T1930] FAT-fs (loop5): Filesystem has been set read-only 09:21:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) fallocate(0xffffffffffffffff, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:35 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r8, 0x8) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:36 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:36 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:36 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 99.773315][ T1930] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 99.784567][ T1930] FAT-fs (loop5): Filesystem has been set read-only [ 100.338075][ T1930] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 100.346626][ T1930] FAT-fs (loop5): Filesystem has been set read-only [ 100.829837][ T9554] cgroup1: Unknown subsys name 'perf_event' [ 100.835973][ T9554] cgroup1: Unknown subsys name 'net_cls' [ 101.227374][ T9735] cgroup1: Unknown subsys name 'perf_event' [ 101.233560][ T9735] cgroup1: Unknown subsys name 'net_cls' 09:21:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r8, 0x8) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r8, 0x8) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:39 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) sendfile(r4, r5, 0x0, 0x280900) dup(r4) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r6, r7, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x280900) r8 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r8, 0x8) lseek(r8, 0x0, 0x2) r9 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r8, r9, 0x0, 0x0) sendfile(r8, r9, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 104.872022][T10421] cgroup1: Unknown subsys name 'perf_event' [ 104.878349][T10421] cgroup1: Unknown subsys name 'net_cls' [ 105.250869][T10555] cgroup1: Unknown subsys name 'perf_event' [ 105.253544][T10556] cgroup1: Unknown subsys name 'perf_event' [ 105.263212][T10556] cgroup1: Unknown subsys name 'net_cls' [ 105.267703][T10555] cgroup1: Unknown subsys name 'net_cls' 09:21:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 107.579598][T11628] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 107.635156][T11628] selinux_nlmsg_perm: 5 callbacks suppressed [ 107.635166][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.689074][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.716756][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.744440][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.771685][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.799186][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.812330][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.825432][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.842786][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 [ 107.856032][T11628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11628 comm=syz-executor.0 09:21:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:45 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:45 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 108.125205][T11639] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:45 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:45 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 108.237379][T10556] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 108.250414][T10556] FAT-fs (loop2): Filesystem has been set read-only 09:21:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 108.285233][T11644] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:21:45 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 108.679292][T11665] netlink: 'syz-executor.0': attribute type 10 has an invalid length. INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes [ 109.910200][T11680] cgroup1: Unknown subsys name 'perf_event' [ 109.916403][T11680] cgroup1: Unknown subsys name 'net_cls' [ 110.378741][T11889] cgroup1: Unknown subsys name 'perf_event' [ 110.385442][T11889] cgroup1: Unknown subsys name 'net_cls' [ 111.594291][T12476] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 09:21:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:48 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 111.820232][T12483] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:48 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 111.942696][T12497] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:49 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 112.065038][T12510] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 113.520302][T12518] cgroup1: Unknown subsys name 'perf_event' [ 113.526575][T12518] cgroup1: Unknown subsys name 'net_cls' [ 113.796057][T12640] cgroup1: Unknown subsys name 'perf_event' [ 113.802329][T12640] cgroup1: Unknown subsys name 'net_cls' 09:21:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:52 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 115.611306][T13321] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 115.653373][T13321] selinux_nlmsg_perm: 110 callbacks suppressed [ 115.653383][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 [ 115.689634][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 [ 115.728172][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 [ 115.755118][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 [ 115.782723][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 [ 115.811015][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 [ 115.826149][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 [ 115.843387][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 09:21:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 115.875390][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 [ 115.899550][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13321 comm=syz-executor.0 09:21:52 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 116.028883][T13346] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 116.054184][T13348] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 09:21:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 116.160774][T13356] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:21:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 116.716622][T13368] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 116.725078][T13367] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 116.803441][T13383] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 116.843007][T13388] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:21:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 116.887280][T13394] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 117.733053][T13407] cgroup1: Unknown subsys name 'perf_event' [ 117.739163][T13407] cgroup1: Unknown subsys name 'net_cls' 09:21:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:56 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:56 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 119.411873][T13815] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 09:21:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:21:56 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:56 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:56 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 120.039449][T13813] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 20) [ 120.070587][T13813] FAT-fs (loop5): Filesystem has been set read-only 09:21:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 120.288045][ T1930] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 20) 09:21:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:57 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:21:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:21:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 120.509515][T13875] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 18) [ 120.538408][T13875] FAT-fs (loop5): Filesystem has been set read-only [ 120.594039][T13873] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 20) [ 120.622903][T13873] FAT-fs (loop4): Filesystem has been set read-only [ 120.629857][T13873] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 20) [ 121.087237][ T1930] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 121.464488][T13885] cgroup1: Unknown subsys name 'perf_event' [ 121.470712][T13885] cgroup1: Unknown subsys name 'net_cls' [ 122.099120][T14180] cgroup1: Unknown subsys name 'perf_event' [ 122.105864][T14180] cgroup1: Unknown subsys name 'net_cls' 09:22:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:00 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 123.251784][T14664] selinux_nlmsg_perm: 219 callbacks suppressed [ 123.251794][T14664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48847 sclass=netlink_route_socket pig=14664 comm=syz-executor.1 [ 123.255932][T14661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48847 sclass=netlink_route_socket pig=14661 comm=syz-executor.4 [ 123.265032][T14664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14664 comm=syz-executor.1 [ 123.275198][T14667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48847 sclass=netlink_route_socket pig=14667 comm=syz-executor.0 [ 123.289991][T14664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14664 comm=syz-executor.1 [ 123.301322][T14661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14661 comm=syz-executor.4 [ 123.322170][T14664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14664 comm=syz-executor.1 [ 123.326981][T14667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14667 comm=syz-executor.0 [ 123.351013][T14664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14664 comm=syz-executor.1 [ 123.362616][T14661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14661 comm=syz-executor.4 09:22:00 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:01 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 125.595171][T14757] cgroup1: Unknown subsys name 'perf_event' [ 125.601274][T14757] cgroup1: Unknown subsys name 'net_cls' [ 126.255453][T15067] cgroup1: Unknown subsys name 'perf_event' [ 126.261621][T15067] cgroup1: Unknown subsys name 'net_cls' 09:22:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:04 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) [ 127.367054][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.914960][T15570] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 18) [ 127.923730][T15570] FAT-fs (loop2): Filesystem has been set read-only 09:22:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:05 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 128.264433][T15584] selinux_nlmsg_perm: 213 callbacks suppressed [ 128.264443][T15584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48847 sclass=netlink_route_socket pig=15584 comm=syz-executor.1 [ 128.280386][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.283927][T15584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15584 comm=syz-executor.1 [ 128.306235][T15584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15584 comm=syz-executor.1 [ 128.312525][T15587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15587 comm=syz-executor.0 [ 128.322621][T15584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15584 comm=syz-executor.1 09:22:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 128.387669][T15584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15584 comm=syz-executor.1 [ 128.427372][T15584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15584 comm=syz-executor.1 [ 128.435637][T15587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15587 comm=syz-executor.0 09:22:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:05 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 128.489838][T15587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15587 comm=syz-executor.0 [ 128.492513][T15584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15584 comm=syz-executor.1 09:22:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 128.627730][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.664282][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:22:05 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 128.737194][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.765774][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.836916][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:22:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:05 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 128.976376][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.171129][T15636] cgroup1: Unknown subsys name 'perf_event' [ 130.177239][T15636] cgroup1: Unknown subsys name 'net_cls' [ 130.446343][T15758] cgroup1: Unknown subsys name 'perf_event' [ 130.452657][T15758] cgroup1: Unknown subsys name 'net_cls' 09:22:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 132.177606][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.197263][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.358156][T16444] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 20) [ 132.366776][T16444] FAT-fs (loop2): Filesystem has been set read-only 09:22:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 132.632337][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.652374][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:22:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 132.745132][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:22:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 132.889229][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.183911][T16501] cgroup1: Unknown subsys name 'perf_event' [ 134.190025][T16501] cgroup1: Unknown subsys name 'net_cls' [ 134.448208][T16617] cgroup1: Unknown subsys name 'perf_event' [ 134.455082][T16617] cgroup1: Unknown subsys name 'net_cls' 09:22:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r2, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 136.193131][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.204996][T17311] selinux_nlmsg_perm: 306 callbacks suppressed [ 136.205005][T17311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17311 comm=syz-executor.1 [ 136.206294][T17309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48847 sclass=netlink_route_socket pig=17309 comm=syz-executor.2 [ 136.211401][T17311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17311 comm=syz-executor.1 [ 136.224261][T17308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17308 comm=syz-executor.0 [ 136.262238][T17309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17309 comm=syz-executor.2 [ 136.263056][T17308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17308 comm=syz-executor.0 09:22:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 136.280418][T17311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17311 comm=syz-executor.1 [ 136.288467][T17308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17308 comm=syz-executor.0 [ 136.312702][T17309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17309 comm=syz-executor.2 [ 136.342966][T17311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=17311 comm=syz-executor.1 09:22:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:13 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 136.603890][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:22:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 136.669396][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:22:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 136.789739][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.040608][T17352] cgroup1: Unknown subsys name 'perf_event' [ 138.046709][T17352] cgroup1: Unknown subsys name 'net_cls' [ 138.301163][T17467] cgroup1: Unknown subsys name 'perf_event' [ 138.307357][T17467] cgroup1: Unknown subsys name 'net_cls' 09:22:17 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 140.035759][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:22:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:17 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a0001020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 140.512189][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:22:17 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a0001020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000a"], 0x2}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 140.636040][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.956575][T18222] cgroup1: Unknown subsys name 'perf_event' [ 141.962644][T18222] cgroup1: Unknown subsys name 'net_cls' [ 142.233616][T18342] cgroup1: Unknown subsys name 'perf_event' [ 142.239935][T18342] cgroup1: Unknown subsys name 'net_cls' [ 143.572079][T19018] selinux_nlmsg_perm: 349 callbacks suppressed [ 143.572086][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.591268][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.604140][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.617293][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.630144][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.643111][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.655974][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.668901][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.682280][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 [ 143.695697][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19018 comm=syz-executor.4 09:22:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:20 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:20 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:20 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a0001020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a0001020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 143.994362][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.024424][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:22:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 144.084623][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:22:21 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a0001020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 144.211822][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.231419][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:22:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a0001020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 144.288776][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:22:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78000200", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 144.379523][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.683015][T19100] cgroup1: Unknown subsys name 'perf_event' [ 145.689125][T19100] cgroup1: Unknown subsys name 'net_cls' 09:22:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:24 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78000200", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78000200", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 147.338853][T19506] __nla_validate_parse: 1 callbacks suppressed [ 147.338858][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.355043][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.439776][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:22:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 147.506057][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:22:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae7800020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78000200", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 147.607275][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:22:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 147.688417][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.713865][T19551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:22:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78000200", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae7800020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 147.805418][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.868901][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.074188][T19579] cgroup1: Unknown subsys name 'perf_event' [ 149.080308][T19579] cgroup1: Unknown subsys name 'net_cls' 09:22:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae78000200", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:27 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae7800020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 150.736337][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.745967][T19985] selinux_nlmsg_perm: 456 callbacks suppressed [ 150.745977][T19985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19985 comm=syz-executor.1 [ 150.746015][T19989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19989 comm=syz-executor.0 09:22:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 150.752234][T19985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19985 comm=syz-executor.1 [ 150.771760][T19989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19989 comm=syz-executor.0 [ 150.780997][T19985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19985 comm=syz-executor.1 [ 150.794008][T19989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19989 comm=syz-executor.0 09:22:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 150.807788][T19985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19985 comm=syz-executor.1 [ 150.817965][T19989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19989 comm=syz-executor.0 09:22:27 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) [ 150.902356][T19985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19985 comm=syz-executor.1 09:22:28 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) [ 150.941616][T19985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19985 comm=syz-executor.1 09:22:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae7800020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:28 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:22:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae7800020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:28 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 09:22:28 executing program 2: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:22:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae7800020000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:28 executing program 2: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) [ 151.150798][T20027] FAT-fs (loop5): bogus number of reserved sectors [ 151.175776][T20027] FAT-fs (loop5): Can't find a valid FAT filesystem [ 152.507604][T20049] cgroup1: Unknown subsys name 'perf_event' [ 152.513732][T20049] cgroup1: Unknown subsys name 'net_cls' 09:22:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 09:22:31 executing program 2: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:22:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 09:22:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r11, 0xffffffffffffffff, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 09:22:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 09:22:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x0) 09:22:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) [ 154.160332][T20458] FAT-fs (loop5): bogus number of reserved sectors [ 154.194228][T20458] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:22:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:22:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:22:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:22:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 154.993526][T20510] FAT-fs (loop5): bogus number of reserved sectors [ 155.000100][T20510] FAT-fs (loop5): Can't find a valid FAT filesystem [ 155.942047][T20520] cgroup1: Unknown subsys name 'perf_event' [ 155.948237][T20520] cgroup1: Unknown subsys name 'net_cls' 09:22:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 09:22:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 09:22:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 09:22:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 157.610400][T20929] FAT-fs (loop5): bogus number of reserved sectors [ 157.622642][T20929] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 09:22:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 09:22:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 09:22:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:34 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="04000a"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) [ 159.062770][T20963] cgroup1: Unknown subsys name 'perf_event' [ 159.068860][T20963] cgroup1: Unknown subsys name 'net_cls' [ 159.349108][T21094] cgroup1: Unknown subsys name 'perf_event' [ 159.355483][T21094] cgroup1: Unknown subsys name 'net_cls' [ 160.199978][T21622] FAT-fs (loop4): bogus number of reserved sectors [ 160.210653][T21622] FAT-fs (loop4): Can't find a valid FAT filesystem 09:22:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:37 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) [ 160.439670][T21700] FAT-fs (loop5): bogus number of reserved sectors [ 160.454170][T21705] FAT-fs (loop4): bogus number of reserved sectors [ 160.462307][T21705] FAT-fs (loop4): Can't find a valid FAT filesystem [ 160.462990][T21700] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 161.771219][T21805] FAT-fs (loop5): bogus number of reserved sectors [ 161.778556][T21805] FAT-fs (loop5): Can't find a valid FAT filesystem [ 161.797410][T21807] FAT-fs (loop4): bogus number of reserved sectors [ 161.806753][T21806] FAT-fs (loop0): bogus number of reserved sectors [ 161.813595][T21807] FAT-fs (loop4): Can't find a valid FAT filesystem 09:22:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 161.827291][T21806] FAT-fs (loop0): Can't find a valid FAT filesystem 09:22:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 162.152002][T21850] FAT-fs (loop4): bogus number of reserved sectors [ 162.187459][T21850] FAT-fs (loop4): Can't find a valid FAT filesystem [ 163.628530][T21871] cgroup1: Unknown subsys name 'perf_event' [ 163.634640][T21871] cgroup1: Unknown subsys name 'net_cls' [ 163.890767][T21984] cgroup1: Unknown subsys name 'perf_event' [ 163.897748][T21984] cgroup1: Unknown subsys name 'net_cls' [ 164.828160][T22544] FAT-fs (loop1): bogus number of reserved sectors [ 164.835698][T22544] FAT-fs (loop1): Can't find a valid FAT filesystem 09:22:42 executing program 4: mkdir(&(0x7f0000001080)='./file0\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 09:22:42 executing program 1: mmap(&(0x7f00002ff000/0x3000)=nil, 0x3000, 0x3000005, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 09:22:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 165.023570][T22601] FAT-fs (loop5): bogus number of reserved sectors [ 165.033421][T22601] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a259111f663a7724bdef6a53b404406284efbddfa789c7ebfa7627227b11e2daf85534aa6f5d98b679c200878f05b91df00000100"], 0x35) pipe(&(0x7f0000000100)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 09:22:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x13) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x13) 09:22:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) sendfile(r9, r10, 0x0, 0x280900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:43 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e", 0xa1, r2) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) 09:22:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 166.089758][T22693] FAT-fs (loop5): bogus number of reserved sectors [ 166.097120][T22693] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:43 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r8) close(r7) 09:22:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 166.535844][T22731] FAT-fs (loop5): bogus number of reserved sectors [ 166.543457][T22731] FAT-fs (loop5): Can't find a valid FAT filesystem [ 166.559870][ T22] audit: type=1400 audit(1580376163.562:27): avc: denied { map_create } for pid=22725 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 166.775144][ T22] audit: type=1400 audit(1580376163.782:28): avc: denied { cpu } for pid=22725 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 166.960291][T22742] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 166.978171][T22742] FAT-fs (loop4): Filesystem has been set read-only 09:22:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a259111f663a7724bdef6a53b404406284efbddfa789c7ebfa7627227b11e2daf85534aa6f5d98b679c200878f05b91df00000100"], 0x35) pipe(&(0x7f0000000100)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 09:22:44 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:44 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x0, 0x0, 0x8000) 09:22:44 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r8) close(r7) 09:22:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) [ 167.018726][T22742] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 167.195921][T22757] FAT-fs (loop5): bogus number of reserved sectors [ 167.217664][T22757] FAT-fs (loop5): Can't find a valid FAT filesystem [ 167.736612][T22751] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 167.745540][T22751] FAT-fs (loop4): Filesystem has been set read-only [ 167.752421][T22751] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) [ 168.265158][T22766] cgroup1: Unknown subsys name 'perf_event' [ 168.271254][T22766] cgroup1: Unknown subsys name 'net_cls' [ 168.736228][T22979] cgroup1: Unknown subsys name 'perf_event' [ 168.742390][T22979] cgroup1: Unknown subsys name 'net_cls' 09:22:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x200004) write$P9_RREADLINK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="3a259111f663a7724bdef6a53b404406284efbddfa789c7ebfa7627227b11e2daf85534aa6f5d98b679c200878f05b91df00000100"], 0x35) pipe(&(0x7f0000000100)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 09:22:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:47 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r8) close(r7) 09:22:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:47 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r8) close(r7) 09:22:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 170.184641][T23571] FAT-fs (loop5): bogus number of reserved sectors [ 170.192024][T23571] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x0) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:47 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r8) close(r7) 09:22:47 executing program 1: 09:22:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:47 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r8) close(r7) 09:22:47 executing program 0: 09:22:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:48 executing program 0: [ 170.935021][T23570] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 170.943950][T23570] FAT-fs (loop1): Filesystem has been set read-only [ 170.950859][T23570] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 09:22:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:48 executing program 1: [ 171.031457][T23606] FAT-fs (loop5): bogus number of reserved sectors [ 171.045259][T23606] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:48 executing program 1: [ 171.079050][T23616] selinux_nlmsg_perm: 64 callbacks suppressed [ 171.079060][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.098722][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.145956][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.179635][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.193759][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.207244][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.220430][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.233925][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.247004][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.260226][T23616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23616 comm=syz-executor.2 [ 171.920465][T23629] cgroup1: Unknown subsys name 'perf_event' [ 171.926565][T23629] cgroup1: Unknown subsys name 'net_cls' 09:22:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:50 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r8) close(r7) 09:22:50 executing program 0: 09:22:50 executing program 1: 09:22:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:50 executing program 0: 09:22:50 executing program 1: 09:22:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:50 executing program 0: 09:22:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:50 executing program 0: 09:22:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 173.631661][T24037] FAT-fs (loop5): bogus number of reserved sectors [ 173.657220][T24037] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:50 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r7) 09:22:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:50 executing program 1: 09:22:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) r10 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r9, r10, 0x0, 0x280900) r11 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r11, 0x800) lseek(r11, 0x0, 0x0) r12 = open(0x0, 0x84002, 0x0) sendfile(r11, r12, 0x0, 0x8400fffffffa) sendfile(r11, r12, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) 09:22:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 09:22:50 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:50 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="955a000074e862310f5b04000000004b2b5d15c6"], 0x14) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f00000000c0)=0x7, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 09:22:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 173.897908][T24075] FAT-fs (loop5): bogus number of reserved sectors [ 173.909999][T24075] FAT-fs (loop5): Can't find a valid FAT filesystem 09:22:51 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x30c5004, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x38028b8, &(0x7f0000000140)=ANY=[@ANYBLOB='auto_da_alloc,resgid=', @ANYRESHEX=r0]) [ 174.071946][T24102] EXT4-fs (sda1): re-mounted. Opts: auto_da_alloc,resgid=0x0000000000000000 09:22:51 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:51 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x30c5004, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x38028b8, &(0x7f0000000140)=ANY=[@ANYBLOB='auto_da_alloc,resgid=', @ANYRESHEX=r0]) 09:22:51 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 174.241773][T24115] EXT4-fs (sda1): re-mounted. Opts: auto_da_alloc,resgid=0x0000000000000000 [ 175.505180][T24126] cgroup1: Unknown subsys name 'perf_event' [ 175.511273][T24126] cgroup1: Unknown subsys name 'net_cls' 09:22:54 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x30c5004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x38028b8, &(0x7f0000000140)=ANY=[@ANYRESHEX]) 09:22:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "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"}) open(0x0, 0x0, 0x0) 09:22:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) sendfile(r9, 0xffffffffffffffff, 0x0, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 09:22:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:22:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:54 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x30c5004, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x38028b8, &(0x7f0000000140)=ANY=[@ANYBLOB='auto_da_alloc,resgid=', @ANYRESHEX=r0]) [ 177.183095][T24532] FAT-fs (loop5): bogus number of reserved sectors [ 177.190427][T24532] FAT-fs (loop5): Can't find a valid FAT filesystem [ 177.197042][T24533] EXT4-fs (sda1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 177.199541][T24538] selinux_nlmsg_perm: 110 callbacks suppressed [ 177.199549][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 09:22:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) sendfile(r9, 0xffffffffffffffff, 0x0, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 177.226137][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 [ 177.239822][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 [ 177.252961][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 [ 177.266195][T24537] EXT4-fs (sda1): re-mounted. Opts: auto_da_alloc,resgid=0x0000000000000000 [ 177.266257][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 09:22:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$packet(0x11, 0x0, 0x300) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) sendfile(r5, r6, 0x0, 0x280900) dup(r5) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r7, 0x800) lseek(r7, 0x0, 0x2) r8 = open(&(0x7f0000001840)='./bus\x00', 0xa4042, 0x20) sendfile(r7, r8, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x280900) r9 = creat(&(0x7f0000000680)='./bus\x00', 0x0) accept$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r9, 0x8) lseek(r9, 0x0, 0x2) sendfile(r9, 0xffffffffffffffff, 0x0, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x280900) r10 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r10, 0x800) lseek(r10, 0x0, 0x0) r11 = open(0x0, 0x84002, 0x0) sendfile(r10, r11, 0x0, 0x8400fffffffa) sendfile(r10, r11, 0x0, 0x280900) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4010) open(0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000410005fba06020000e000"/29, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000002431a27fc116bd729cfd00006f92d9a72d015471d2c7e62bf176d7501f912f3e4ca90100000017a903d82c7d2485e412f52092ea46f4c02231043a36ca2c8095d57380ebe14cdd6720eafbbd6b5a86966886a186c8f3f7de3a918952a592707830a344e251f58feaadc506bfca62b319a00000b2532edd33c37ba397b36a1fe1f2c529fa14c44fc20c"], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe2(&(0x7f00000001c0), 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 177.312614][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 [ 177.325873][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 [ 177.339264][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 09:22:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 177.352365][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 [ 177.366157][T24538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24538 comm=syz-executor.2 09:22:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:22:54 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x30c5004, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x38028b8, &(0x7f0000000140)=ANY=[@ANYBLOB='auto_da_alloc,resgid=', @ANYRESHEX=r0]) 09:22:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 177.469316][T24552] EXT4-fs (sda1): Unrecognized mount option "0xffffffffffffffff" or missing value 09:22:54 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x30c5004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x38028b8, &(0x7f0000000140)=ANY=[@ANYRESHEX]) [ 177.555317][T24561] EXT4-fs (sda1): re-mounted. Opts: auto_da_alloc,resgid=0x0000000000000000 09:22:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fallocate(r3, 0x30, 0x100, 0x677) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000240)={0x0, "5381c62f1f7db024b87d0d8546330e4fda44524e173d6bc009c65e9f5464b49b938dfc4e0d1b4aa7f59ca8bbf0711d97e85fe30f6ccea251fb1d501bcbb203eef51388a732ea17e828c187ff2d196fc7c9a10507ef15358c926c3376e8cd3cc8eb218b73b7a47acfe8fe06240511d4ffaf726f7fd2e877462f749ddeb63adcebe9d816d6e62a42542cf2322ac18bec0529bd6db5b66c0a1ee7045323a1ab09ec9a13dd639538f5685510ef5077dbe995cd3d7cf9b1f1c68fe26c1596fd6ad5b968945a3b06e09a6b2db0375a8646476a0e84f13d0d7e1595bfd3db38adcf5854cdc425e930320ba19c68cc29d8fe8219b9872fa1537769b3d0238d9bff37d8dc"}) open(0x0, 0x0, 0x0) 09:22:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 09:22:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000000, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) close(r3) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r1, 0x0, 0x9, &(0x7f0000000040)='GPLnodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="6fd8d86480d5f3231bcbac15c96a7238b1643bb1c943645585ff1f6f8a68afe54a85ee2502793901e71e91bee54b5b679a0c62fefc8fcb7c41ba71728beedc9c6931316c6166e85d698a7ab192b3ae70a216d6c6d1223a9751535cc49ca74997d2028fc51b413613dc533ec192367d65ca73ca07f952baeb3c5e22c7b67654370f2affb85909", &(0x7f0000000300)=""/219}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:22:54 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x30c5004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x38028b8, &(0x7f0000000140)=ANY=[@ANYBLOB='auto_da_alloc,resgid=', @ANYRESHEX]) 09:22:54 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 177.722801][T24584] kasan: CONFIG_KASAN_INLINE enabled [ 177.731492][T24584] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 177.749861][T24584] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 177.756839][T24584] CPU: 1 PID: 24584 Comm: udevd Not tainted 5.4.16-syzkaller-01236-gcac5f7901828 #0 [ 177.766195][T24584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.776261][T24584] RIP: 0010:path_openat+0x324/0x3c00 [ 177.781655][T24584] Code: 48 89 84 24 00 01 00 00 42 80 3c 38 00 74 08 48 89 df e8 5f ac f8 ff 48 89 5c 24 38 48 8b 1b 48 8d 7b 04 48 89 f8 48 c1 e8 03 <42> 8a 04 38 84 c0 0f 85 4b 24 00 00 8b 43 04 89 84 24 08 01 00 00 [ 177.802140][T24584] RSP: 0018:ffff8881d8c7f4c0 EFLAGS: 00010247 [ 177.808205][T24584] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881d8c7f6e8 [ 177.816958][T24584] RDX: ffff8881d7b1e798 RSI: 0000000000000000 RDI: 0000000000000004 [ 177.824931][T24584] RBP: ffff8881d8c7f790 R08: ffffffff817828c1 R09: 0000000000000003 [ 177.832901][T24584] R10: ffffed103b18fe4b R11: 0000000000000004 R12: ffff8881d8c7f7e8 [ 177.840884][T24584] R13: ffff8881ae015800 R14: ffff8881d8c7f9f0 R15: dffffc0000000000 [ 177.848863][T24584] FS: 00007f06356b37a0(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 177.857975][T24584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.865099][T24584] CR2: 00007ffdf0096fc8 CR3: 000000019ac57006 CR4: 00000000001606e0 [ 177.873177][T24584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.881137][T24584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.889119][T24584] Call Trace: [ 177.892780][T24584] ? stack_trace_save+0x1e0/0x1e0 [ 177.897867][T24584] ? is_bpf_text_address+0x2c8/0x2e0 [ 177.903199][T24584] ? stack_trace_save+0x1e0/0x1e0 [ 177.908256][T24584] ? do_filp_open+0x430/0x430 [ 177.912938][T24584] ? stack_trace_save+0x111/0x1e0 [ 177.917952][T24584] ? stack_trace_snprint+0x150/0x150 [ 177.923226][T24584] do_filp_open+0x1f7/0x430 [ 177.927716][T24584] ? vfs_tmpfile+0x230/0x230 [ 177.932285][T24584] ? load_elf_binary+0x1abd/0x3720 [ 177.937400][T24584] ? memset+0x31/0x40 [ 177.941374][T24584] ? rw_verify_area+0x360/0x360 [ 177.946215][T24584] do_open_execat+0x178/0x860 [ 177.950895][T24584] ? security_file_permission+0x241/0x350 [ 177.956617][T24584] ? open_exec+0x60/0x60 [ 177.960929][T24584] ? __should_failslab+0x11a/0x160 [ 177.966151][T24584] ? getname_kernel+0x59/0x2f0 [ 177.970930][T24584] ? getname_kernel+0x15d/0x2f0 [ 177.975787][T24584] ? memcpy+0x49/0x60 [ 177.979764][T24584] ? getname_kernel+0x214/0x2f0 [ 177.984612][T24584] open_exec+0x3d/0x60 [ 177.988684][T24584] load_elf_binary+0x1abd/0x3720 [ 177.993711][T24584] ? populate_vma_page_range+0x100/0x100 [ 177.999371][T24584] ? __kasan_check_write+0x14/0x20 [ 178.004503][T24584] ? _raw_read_unlock+0x12/0x30 [ 178.009572][T24584] ? load_script+0x184/0x970 [ 178.014183][T24584] ? bm_evict_inode+0xd0/0xd0 [ 178.018978][T24584] ? copy_strings+0x7e4/0x900 [ 178.023664][T24584] ? load_script+0x970/0x970 [ 178.028257][T24584] search_binary_handler+0x190/0x5e0 [ 178.033659][T24584] __do_execve_file+0x12a2/0x1c00 [ 178.038686][T24584] ? do_execve_file+0x40/0x40 [ 178.043368][T24584] ? getname_flags+0x214/0x640 [ 178.048157][T24584] __x64_sys_execve+0x94/0xb0 [ 178.052928][T24584] do_syscall_64+0xc0/0x100 [ 178.057537][T24584] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 178.063422][T24584] RIP: 0033:0x7f0634d97207 [ 178.067830][T24584] Code: 77 19 f4 48 89 d7 44 89 c0 0f 05 48 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 f7 d8 64 41 89 01 eb df b8 3b 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 f3 c3 48 8b 15 00 8c 2d 00 f7 d8 64 89 02 [ 178.087976][T24584] RSP: 002b:00007fffd30bd468 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 178.096932][T24584] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007f0634d97207 [ 178.104942][T24584] RDX: 0000000000b94c70 RSI: 00007fffd30bd560 RDI: 00007fffd30be570 [ 178.113014][T24584] RBP: 0000000000625500 R08: 0000000000000197 R09: 0000000000000197 [ 178.121283][T24584] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000b94c70 [ 178.129823][T24584] R13: 0000000000000007 R14: 0000000000b45030 R15: 0000000000000005 [ 178.137803][T24584] Modules linked in: [ 178.147663][T24584] ---[ end trace 9ec228a4d1b50ae3 ]--- [ 178.153492][T24584] RIP: 0010:path_openat+0x324/0x3c00 [ 178.159072][T24584] Code: 48 89 84 24 00 01 00 00 42 80 3c 38 00 74 08 48 89 df e8 5f ac f8 ff 48 89 5c 24 38 48 8b 1b 48 8d 7b 04 48 89 f8 48 c1 e8 03 <42> 8a 04 38 84 c0 0f 85 4b 24 00 00 8b 43 04 89 84 24 08 01 00 00 [ 178.181681][T24593] FAT-fs (loop5): bogus number of reserved sectors [ 178.183549][T24584] RSP: 0018:ffff8881d8c7f4c0 EFLAGS: 00010247 [ 178.192934][T24593] FAT-fs (loop5): Can't find a valid FAT filesystem [ 178.194884][T24584] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881d8c7f6e8 [ 178.209997][T24584] RDX: ffff8881d7b1e798 RSI: 0000000000000000 RDI: 0000000000000004 09:22:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a000102000000c2e2ae780002000000", @ANYRES32=0x0, @ANYBLOB="0400"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 178.219031][T24584] RBP: ffff8881d8c7f790 R08: ffffffff817828c1 R09: 0000000000000003 [ 178.227960][T24584] R10: ffffed103b18fe4b R11: 0000000000000004 R12: ffff8881d8c7f7e8 [ 178.236113][T24584] R13: ffff8881ae015800 R14: ffff8881d8c7f9f0 R15: dffffc0000000000 [ 178.244878][T24584] FS: 00007f06356b37a0(0000) GS:ffff8881dbb00000(0000) knlGS:0000000000000000 [ 178.253990][T24584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.261267][T24584] CR2: 00007ffc91c95fd8 CR3: 000000019ac57003 CR4: 00000000001606e0 [ 178.269877][T24584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.278161][T24584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.287504][T24584] Kernel panic - not syncing: Fatal exception [ 178.294208][T24584] Kernel Offset: disabled [ 178.298557][T24584] Rebooting in 86400 seconds..